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BEA Unifies Its Software 
Development Environment 


Upgraded version of WebLogic suite converges | 
integration and building of homegrown apps 





BY CAROL SLIWA 
To kick off its annual eWorld 
conference, BEA Systems Inc. 
today will unveil beta versions 
of its new suite of WebLogic 
software products, including 
its application server, enter- 
prise portal and integration 
broker technologies. 

But analysts pre- 
dicted that compa- 
nies will be most in- 
terested in the suite’s 
upgraded WebLogic 
Workshop, since the 
new tool provides a 
unified interface for 
developing to any of 


the WebLogic products. 
“That’s the right direction,” 
said Bob Carasik, enterprise ar- 
chitect at the IT arm of Wells | 
Fargo & Co. in San Francisco. 
“We're glad to see they’re 
adding new layers of function- 
ality on top of the application 
server. They have to move up 
the stack, because 
application servers 
are going to become 
a commodity.” 

The first version 
of WebLogic Work- 
shop, which shipped 
last year, was re- 





stricted to building 


Web services. The new ver- 
sion has been extended to let 
developers build custom ap- 
plications, create portals, inte- 
grate applications and manage 
business processes and trad- 
ing partners, said Chet Ka- 
poor, vice president and gen- 
eral manager of San Jose- 
based BEA’s integration group. 

WebLogic Workshop has 
also been expanded with more 
controls to remove the com- 
plexity of building applica- 
tions that rely on Java 2 Enter- 
prise Edition technologies, 
Kapoor added. 

“This is a very substantial 
piece of work,” said John Ry- 
mer, an analyst at Cambridge, 

BEA, page 49 


CRM Analytics Starts to Pay Off for Users 


Siebel, other vendors 
put priority on built-in 
tools after slow start 
BY MARC L. SONGINI 
The use of analytical custom- 
er relationship management 
software is still in its infancy. 
But some companies that have 
been willing to give the tech- 
nology a shot say their invest- 
ments are paying off. 

For example, Honeywell 





Aerospace is already seeing a 
return on its investment in the 
analytical CRM applications it 
installed three months ago to 
help its sales force manage 
customer accounts, said Dar- 
ryl Carroll, director of sales 
and marketing processes at 
the Honeywell International 
Inc. subsidiary. 

Phoenix-based Honeywell 
Aerospace, which makes air- 
craft parts, is using Siebel Sys- 
tems Inc.’s CRM tools. Sales 
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personnel can now use a dash- 
board interface to look at cus- 
tomer data across the compa- 
ny’s various business units to 
identify selling opportunities 
and proactively address po- 
tential problems, such as is- 


| sues related to specific parts, 


he said. 
Carroll declined to disclose 


| how much the software cost, 


but he said Honeywell Aero- 
space has already recouped its 
investment through produc- 


| tivity gains. Previously, the 


company’s sales force had to 
CRM Analytics, page 12 
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| IBM remains fully committed 
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- Choosing a strategic vendor is far from elementary. 

~ It’s along-term commitment that involves a lot more than the 
technology you buy. Before you tie your company’s fortunes to 
those of a supplier, it’s critical to investigate thoroughly and learn 
as much as you can about your would-be partner's financial histo- 
ryar We offer 10 ways to assess the financial health 


of IT vendors. SEE PAGE 35. 


IBM Defends Pricing Model 


Plans to keep, improve | 
mainframe Workload 


BY JAIKUMAR VIJAYAN 


to its Workload License Charge | 
mainframe software pricing 
model and will continue to try | 
to make it easier for users to 
implement it. That was the 
message delivered by an IBM 
executive at the Share large- 
systems user conference in 
Dallas last week. 





IBM announced WLC in 
October 2000 along with its 


| 64-bit zSeries mainframes. 
| Under the pricing model, IBM 


z/OS users pay for software 
based on the average size of 


| their workloads and not on 


the overall system capacity. 
Despite the promised bene- 
fits, users have complained 


| that WLC is hard to imple- 


ment and understand [Quick- 
Link 32381]. IBM itself has ac- 
knowledged that the model 
isn’t for everyone and requires 
IBM, page 49 
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EVALUATE BRAINSTORM 


iForce” Solution Centers let you test your 
dream solution before you fully invest. 


Why spend countless hours and dollars prototyping and testing 
a new solution in your own data center? Why take chances 
deploying that new solution without knowing for sure that it 
works? Instead of taking on the risk, the worry and the costs 
yourself, why not bring your next technology initiative to an 


iForce™ Solution Center? 


The global network of iForce Centers, operated by Sun and 
world-class partners like CSC, Fujitsu, Avnet, Tech Access, 
Sierra Systems and EDS, is the ideal place to create and test 
your next business solution. A place where you can brainstorm 


solutions with some of the best minds in the business. 


Learn more about iForce and browse our online directory of 
industry-specific solutions. Visit SUN.COM/WHYNOT 


IMPLEMENT 


Bring in your best ideas. Your most ambitious, competitive 
initiatives. Even your problems. And let best-of-breed 
software companies like i2 Technologies, Manugistics and 
SAP collaborate to design, test and benchmark your solution 
on the exact hardware and software configurations it will 


ultimately be deployed on. 


So whether you're in financial services, manufacturing or 
retail, you can leave the iForce Center with a battle-tested 
prototype that's proven to work in real-world conditions, in 


your own data center. Before you pay for the final product. 


The bottom line? You get to invent solutions that move your 
business forward with significantly lower cost and risk. 


Which is a fantasy come true for any IT professional. 


@ Sun. 


microsystems 
We make the net work. 


©2003 Sun Microsystems, Inc. All rights reserved. Sun, Sun Microsystems, the Sun logo and iForce are trademarks or registered trademarks of 
Sun Microsystems, Inc. in the United States and other countries. 





Can your antivirus software provide double the scanning power? 


Making sure your company is secure gets more and more difficult every day. That’s why eTrust™ Antivirus v7 
from Computer Associates uses dual scanning engines to ensure comprehensive virus protection. It processes 
data in real time to search out and eliminate viruses, and it also scans files during prescheduled and 
off-peak hours. All at the cost of most single-engine AV products. It’s more than just twice the protection. 
It’s twice the peace of mind. ca.com/etrust/antivirus 


eTrust” Antivirus Computer Associates® 


© 2003 Computer Associates International, Inc. (CA). All rights reserved. eTrust™ Antivirus was formerty known as eTrust™ Inoculate/T* 
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Trades at Top Speed 


In the Technology section: Straight-through 
processing systems could save finaacial ser- 
vices companies billions of dollars. But inte- 
grating trade-matching systems requires 
both automating manual processes and cre- 
ating a complex middleware iayer. Page 21 
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Drawing a Crowd 


in the Management section: Too many companies 
get caught up in the hoopla surrounding portal tech- 
nology, focusing mostly on implementation and in- 
tegration issues. Here’s how to bring the focus back 
to usability. Page 38 
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On the Mark: Mark Hall gets 
the lowdown on an IT man- 
agement dashboard upgrade 
while learning why Siebel still 
has big friends in big places. 


Maryfran Johnson believes 
that IT leaders’ faith in tech- 
nology will help move the 
world forward bit by bit to 
become a better place. 


Pimm Fox advises you to pre- 
pare a response with other de- 
partment managers for when 
— not if — an IT security 
breach happens. 


Michael Gartenberg suggests 
that the IT department is the 
best place to begin a company 
weblog. 


33 Robert L. Mitchell says the 


handling of the recent theft of 
8 million credit card numbers 
exposes some fundamental 
chalienges facing e-commerce. 


John Berry wonders whether 
IT could help business units 
with economic value manage- 
ment tasks. 


50 Frankly Speaking: Frank 


Hayes warns developers 

who are not getting “face 
time” with their users that 
their jobs are ripe for overseas 
outsourcing. 
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The Peril Within 

MOBILE/WIRELESS: Security begins at home. 
Many employees build their own wireless 
LANs, but that can mean big trouble for com- 
panies. Henry Feusi, a managing consultant 
at New York-based Predictive Systems Inc., 


says these setups can be open windows for 
intruders. @ QuickLink 36643 


Behavioral Rules vs. Signatures 
SECURITY: Both technologies have their pros 
and cons, which is why security expert Yona 


Hollander recommends using both to pro- 
tect data in the enterprise. @ QuickLink 36139 


IE Web Controls in VB.Net 
DEVELOPMENT: A simple example of how to 
use the TreeView and TabStrip Internet Ex- 
plorer Web Controls with Visual Basic .Net. 
@ QuickLink 22930 


What They Can’t Find 
Can Get You 20 Years 


STORAGE: The area of records retention and 
destruction has become something of a 
minefield. IT staff must use all of their re- 
sources to navigate it safely and lawfully. 

@ QuickLink 35933 


‘It’s the Restore, Stupid!’ 

STORAGE: You can do the best backup in the 
world, but if you can’t recover your data 
quickly and with 100% certainty, it’s for 
naught, says Live Vault Corp.’s CEO. 

@ QuickLink 36219 
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Newsletter Subscriptions 
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Knowledge Centers 
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The Online Store 
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AT DEADLINE 


IBM Signs $1B 
IT Services Deal 


IBM announced a six-year !T 
services deal valued at about 

$1 billion with AXA Group, a 
Paris-based insurance and finan- 
cial services firm. The compa- 
nies said IBM will consolidate 
AXA’s servers, mainframes and 
storage devices into an “on- 
demand” computing installation. 
But they added that AXA will 
retain full control of its IT infra- 
structure and workers. 


IETF to Research 
Antispam Measures 
The Internet Engineering Task 
Force (IETF) said it has set up an 
antispam research group to in- 
vestigate new ways to help users 
block unsolicited commercial 
e-mail. The group will explore the 
development of a common archi- 
tecture for detecting spam and 
enforcing user consent policies. 
It will also consider possible anti- 
spam legislation. 


Sun Plans CPUs 
With Multiple Cores 


At a meeting with financial ana- 
lysts, Sun Microsystems Inc. out- 
lined plans to develop chip multi- 
threading processors, starting 
with an UltraSPARC IV device 
due later this year. Sun said it 
will put multiple CPU cores that 
can each simultaneously process 
multiple tasks on a single piece 
of silicon. IBM last month said it 
will deliver similar processors 
next year [QuickLink 36523]. 


Short Takes 


EMC CORP. in Hopkinton, Mass., 
added Gigabit Ethernet support 
and new disk drives to its Sym- 
metrix 8000 storage arrays 

and announced models optimized 
for use with mainframes. . . . 
LUCENT TECHNOLOGIES INC. in 
Murray Hills, N.J., signed an 
agreement in principle to settle 
an accounting probe by the Secu- 
rities and Exchange Commission. 
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IBM Upgrades Business 
Integration Technology 


WebSphere tools 
reduce need for Java 


programming skills 


BY MARC L. SONGINI 
BM IS ENHANCING its Web- 
Sphere middleware tech- 
nology in an effort to sim- 
plify the task of creating 

and monitoring data and bus- 

iness-process workflows 

through corporate systems. 
This week, IBM will an- 

nounce an upgrade of its Web- 

Sphere Business Integration 

software aimed at letting users 

model business processes that 
go across different applica- 
tions without needing to have 
special Java coding skills. It 
also plans to roll out improved 
development tools and in- 
creased Web services support 

(see box). 

To widen the modeling and 
monitoring capabilities in 

WebSphere Business Integra- 


| tion, IBM is embedding tech- 


nology it gained in September 
when it acquired Holosofx 
Inc., a business integration 
software vendor in El Segun- 
do, Calif., said Sean Poulley, 
director of WebSphere busi- 
ness development at IBM. 
Previously, the Holosofx 
applications required a custom- 
ized link to WebSphere. They 
will still be sold separately, but 
Poulley said the Holosofx tech- 
nology will now be integrated 
with WebSphere Business Inte- 
gration Server Version 4.2, 
which is due later this month. 


Closing the Loop 

The Business Integration Mod- 
eler will let users outside of IT 
create blueprints of business 
processes that can be handed 
off to developers for imple- 
mentation, IBM said. Compa- 
nies can also use the modeler 
with the Web browser-based 
Business Integration Monitor 
to develop systems with built- 
in thresholds and alerts that 
provide feedback as business 
processes are executed. 





“If I've got the modeling tool 
integrated with the monitoring 
tool, I get a closed loop,” Poul- 
ley said. For instance, he said, 
a manufacturer could create 
a workflow process to restock 
its inventories and let end 
users know the cost of items 


| as they’re being procured. 


Robert Catterall, director 
of strategic technology for the 
e-commerce division at Check- 
Free Corp. in Norcross, Ga., 
said the capabilities being 
added by IBM could be useful 
in involving less technically 
skilled workers in application 


| integration projects. 


“There are people who 
know Java well, and there are 





people who understand busi- 
ness processes well, and peo- 
ple in one of these groups are 
very often not found in the 
other,” Catterall said. Check- 
Free uses IBM’s DB2 database 
and is contemplating a Web- 
Sphere installation, he noted. 

IBM is making the right 
moves by starting to combine 
its various integration prod- 
ucts and giving them common 
tools and user interfaces, said 
Sharyn Leaver, an analyst at 
Forrester Research Inc. in 
Cambridge, Mass. But IBM has 
yet to standardize on a single 
runtime engine for its Web- 
Sphere application and integra- 
tion servers, she added. 
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PRODUCT FEATURES 


Integrated business-process 
modeling and monitoring tools 
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Improved development tools 
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IBM's Eclipse framework pro- 
gramming environment to pro- 
VGC Cua Car ae 


Support for publishing busi- 
ness processes as Web services. 


Doug Brown, director of 
marketing for WebSphere 
integration, acknowledged 
that IBM supports multiple 
runtime engines within the 
sprawling WebSphere line. 
But by year’s end, it plans to 
consolidate on one runtime 
technology so applications 
will be reusable, Brown said. 3 





Cisco Builds Rugged Switch 
To Link Factory, Back Office 


BY MATT HAMBLEN 
In a move aimed at unifying 
factory-floor networks with the 
ones in corporate back offices, 
Cisco Systems Inc. will unveil 
today at the National Manu- 
facturing Week show in Chica- 
go a ruggedized line of switch- 
es based on IP and Ethernet. 
The Catalyst 2955 series is 
designed for use 
in factories and 
in utility, trans- 
portation and 
military settings, 
where tempera- 
tures, humidity, 
dust and vibra- 
tions are more 
extreme than they are in regu- 
lar business environments, 
Cisco officials said. The de- 
vices, which are about one- 
third as big as Cisco’s regular 
switches, are shipping now and 
are priced from $2,100 to $3,600. 
The 2955 series introduces 
the first rugged Ethernet 
switches developed by a major 
networking equipment ven- 
dor, said Harry Forbes, an ana- 
lyst at ARC Advisory Group 
Inc. in Dedham, Mass. He not- 


CISCO'S CATALYST 2955 is 
about one-third the size of 
its regular switches. 


ed that Cisco is rolling out the 
switches at a time when factory- 
floor devices that control pro- 
duction processes, robots and 
other machines are starting to 
be equipped with Ethernet in- 
terfaces instead of manufac- 
turing-specific technologies. 

The biggest supplier of 
rugged Ethernet switches for 

factories is 
Hirschmann 
Electronics 
GmbH in Neck- 
artenzlingen, 
Germany, Forbes 
said. Switches 
accounted for 
about 8% of the 
300,000 Ethernet-ready de- 
vices sold for factory use last 
year, ARC said. 

For companies that have in- 
stalled Cisco products and Eth- 
ernet technology in their main 
corporate networks, the 2955 
could help extend to the manu- 
facturing realm the quality-of- 
service features and other ca- 
pabilities that are built into the 
Catalyst technology, said Joel 
Conover, an analyst at Current 
Analysis Inc. in Sterling, Va. 








“You're going to be able to 
monitor and control manufac- 
turing from the core network,” 
Conover said. He added that 
many mainstream IT man- 
agers will be more willing to 
accept the 2955 switches than 
devices from specialty ven- 
dors like Hirschmann because 
Cisco’s technology is so wide- 
ly deployed and accepted. 

“I won't have to sell people 
on the brand of the switch,” 
said Carl Staab, manager of 
communications technology 
at Emerson Process Manage- 
ment in Pittsburgh. Emerson 
has been beta-testing the 2955 
series since January and hopes 
to resell the Cisco switches 
with process control equip- 
ment that it markets to water 
and sewer utilities, he said. 

The 2955 series also has 12 
Ethernet ports — twice what 
the competition offers, Staab 
said. Another advantage over 
existing factory-floor switches 
is the 2955’s ability to quickly 
alert workers to network prob- 
lems through an external light 
on the device, he said. D 


VIDEO VAULT 


Cisco upgrades its technology for caching 

high-bandwidth data at network edges: 
QuickLink 36726 
www.computerworld.com 
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Navy’s Massive Intranet Rollout OK’d 


Some users still cite costs, other concerns 








BY DAN VERTON 

The U.S. Navy confirmed last 
week that the Pentagon has 
given it the go-ahead to move 
as many as 310,000 Navy and 
Marine Corps IT users to the 
Navy/Marine Corps Intranet 
(N/MCI). 

The decision comes after 
months of operational testing 
that was required by Congress 
before it would allow the 
Navy to proceed beyond a 
60,000-user cap that it im- 
posed after concerns surfaced 
about the program’s technical 
feasibility and cost [QuickLink 
30106]. However, after the suc- 
cessful completion of the test- 
ing phase, the Navy received 
permission to proceed with all 
160,000 of the N/MCI seats 
that had been previously ap- 
proved and was authorized to 
order an additional 150,000 
N/MCI seats from its prime 
contractor, Plano, Texas-based 
Electronic Data Systems Corp. 

N/MCL is an IT outsourcing 





project, often referred to as 
seat management, intended to 
give the Navy and Marine 
Corps secure, universal access 
to integrated voice, video and 
data communications. It’s also 
designed to provide pier-side 
connectivity to Navy vessels 
in port and, when completed, 
will link more than 310,000 





desktops across the U.S., Puer- 
to Rico, Japan and Cuba. 

Although most of the focus 
of the N/MCI deployment re- 
mains on support units, Vin- 
cent Madsen, a 24-year EDS 
veteran who recently took 
over as client delivery execu- 
tive for the N/MCI program, 
said the potential for military 
conflict in Iraq does play a role 
in planning for the future. “We 
have to work closely with all 
the units to make sure we’re 
not going to get in the way,” he 
said. “I don’t anticipate any de- 
lays, but we may move some 
schedules around.” 

For now, N/MCI is moving 
full steam ahead. “The results 
from four months of testing 
clearly demonstrated that the 
N/MCLI is ready to move to the 
next level,” Rear Adm. Charles 
L. Munns, director of the 
N/MCI project, said in a state- 
ment released by the Navy. 

“We’re now moving at light 
speed to get all of this de- 
ployed as contracted by the 
end of the year,” said Madsen, 


referring to all 310,000 seats. 
EDS has dedicated more 
than 300 employees to deploy- 
ment and installation and is re- 
lying on Dell Computer Corp. 
for hardware delivery as well 
as initial build, configuration 
and customer support for the 
N/MCI desktop Windows en- 
vironment, said Madsen. 
“We're going to rev up to the 
point where we'll be able to 
deploy 1,000 desktops per day 
across the entire infrastructure 
at multiple locations,” he said. 


Hurdles Remain 

But some N/MCI users said 
they continue to struggle to 
maintain productivity and 
keep N/MCI costs down. 

A San Diego-based Naval IT 
manager involved in the proj- 
ect said N/MCI seats are cost- 
ing his customers $3,000 to 
$6,000 per seat per year. The 
cost is so high that some Navy 
organizations can’t afford 
N/MCI workstations for their 
contractor support personnel, 
he said. He claimed that using 


another contractor, he could 
supply for $570,000 what EDS 
is charging a Navy unit $2.5 
million for. 

Another manager from the 
Naval Region Southwest, 
which includes 10 bases in 
California and one in Nevada, 
said his users continue to deal 
with “nothing but chaos, poor 
communication and lack of 
any deliverables.” 

One organization has been 
waiting more than a year to 
get a critical application shift- 
ed to N/MCI, the manager 
said. There has also been no 
accountability for missed 
schedules or critical applica- 
tion or system outages, the 
manager added. 

The Navy and EDS have re- 
peatedly downplayed such 
problems, characterizing them 
as natural growing pains and 
going so far as to accuse some 
civilian Navy employees of 
having an agenda to kill the 
program. D 
COLLAPSED TALKS 
EDS ends negotiations for a multibillion- 
dollar contract with French firm Alstom: 

QuickLink 36654 
www.computerworld.com 





UPS Readies Wireless Upgrade in U.S. 


50,000 drivers to get 
new info terminals 


BY BOB BREWIN 
LOS ANGELES 
United Parcel Service Inc. will 
deploy higher-speed wireless 
services to its U.S. delivery 
fleet this year, starting with 
retrofitting 4,500 driver data 
terminals with modems that 
support AT&T Wireless Ser- 
vices Inc.’s General Packet Ra- 
dio Service (GPRS) network. 
The retrofitting move is a 
large-scale test of the GPRS 
mobile data service that will 
be followed by a rollout of new 
terminals to UPS’s 50,000-plus 
drivers in the U.S. Tamara 
Schwartz, the company’s direc- 
tor of global network services, 
said at a wireless IT confer- 
ence held here last week by 
Gartner Inc. that UPS next 
month will detail its plans for 


| 


deploying the more advanced 
information terminals. 
Schwartz wouldn’t disclose 
any specifics about the new 
terminals, which will be made 
by Holtsville, N-Y.-based Sym- 
bol Technologies Inc. But a 
spokeswoman for Atlanta- 
based UPS said the terminals 
will be equipped with GPRS 
modems or with ones that sup- 
port the rival Code Division 
Multiple Access (CDMA) 
wireless network technology. 


Improved Throughput 

For UPS drivers, the rollout 
should mean much better data 
throughput. For example, the 
AT&T Wireless network sup- 
ports data transmission rates 
of up to 40K bit/sec., com- 
pared with a speed of about 
9.6K bit/sec. for the network 
services provided by Reston, 
Va.-based Motient Corp. that 
are now used in the U.S. 





The planned U.S. project 
follows a deployment last year 
of GPRS-enabled terminals to 
15,000 UPS drivers in Europe, 
where the company uses wire- 
less network services provid- 
ed by the T-Mobile division of 
Deutsche Telekom AG in 
Bonn. T-Mobile’s GPRS net- 
work runs at 20K to 40K 
bit/sec. and replaced a 9.6K 





bit/sec. Mobitex network also 
operated by T-Mobile. 
Schwartz said the higher 
data rates have helped UPS 
better manage “on-demand” 
delivery services in Europe, 
where drivers typically re- 
spond to requests for pickups 
instead of making scheduled 
stops as they do in the U.S. 
UPS and Memphis-based ri- 
val FedEx Corp. both said last 
July that they planned to stan- 
dardize their global wide-area 





wireless architectures on 
GPRS technology wherever 
it’s available. But the two com- 
panies also acknowledged that 
they would have to use other 
wireless standards in some lo- 
cations [QuickLink 31154]. 

At last week’s conference, 
Schwartz said that’s still part 
of the plan at UPS. The com- 
pany will rely on CDMA net- 
works that are operated by 
carriers such as Verizon Wire- 
less and Sprint PCS Group to 
augment GPRS in the U.S., be- 
cause Redmond, Wash.-based 
AT&T Wireless doesn’t pro- 
vide coverage in all parts of 
the country, she said. 

Gartner analyst Ken Du- 
laney said UPS has no choice 
but to go with both GPRS and 
CDMA in the U.S. In contrast, 
European countries offer com- 
panies GPRS as a single wire- 
less standard, he noted. 

The AT&T Wireless GPRS 
network will be tested at pack- 
age-delivery hubs with more 
than 60 drivers, UPS said. D 
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Ford to Slash IT 
Budget by $300M 


Ford Motor Co. said it’s cutting 
its IT budget by about $300 mil- 
lion as part of a cost-reduction 
initiative that began early last 
year. The cutbacks will lower 
Ford’s IT spending by 20% and 
may include layoffs of some of 
its 2,800 contract IT workers, a 
spokesman said. He added that 
Ford, which has about 6,000 IT 
staffers, is evaluating which proj- 
ects will be affected by the cuts. 


HP Results Hit by 
Weak U.S. Sales 


Hewlett-Packard Co. reported 
lower-than-expected financial 
results for its first quarter and 
pinned most of the blame on con- 
tinued weak IT spending in the 
U.S. HP said it had a $721 million 
profit on revenue of $17.9 billion 
in the quarter, which ended Jan. 
31. HP didn’t disclose compara- 
tive year-earlier numbers that 
take its acquisition of Compaq 
Computer Corp. into account. 


CERT, IT Vendors 
Warn of SIP Flaw 


The CERT Coordination Center in 
Pittsburgh warned about a soft- 
ware flaw that could affect net- 
working devices with support for 
the Session Initiation Protocol 
(SIP). Analysts and IT vendors 
said users haven't reported any 
problems as a result of the flaw. 
But vendors such as Cisco Sys- 
tems Inc. and Nortel Networks 
Ltd. said some of their products 
are vulnerable, and they have 
made patches available. 


Short Takes 


DELL COMPUTER CORP. CEO 
Michael Dell said at a conference 
that the company will announce 
its first Dell-branded printers 
this month. . . . DIVINE INC., a 
Chicago-based software and IT 
services vendor, filed for Chapter 
11 protection and said it’s explor- 
ing a possible sale of its assets. 


NEWS 


MARK HALL #® ON THE MARK 


IT Digital Dashboard 
‘To Get Face-Lift ... 


... and improved integration with major applications in Version 5.0 of 
Kintana Dashboard slated for June, sources said. Kintana Inc. in Sun- 
nyvale, Calif., whose eponymous IT capacity planning and resource 
management product has attracted a growing number of users in the 
past year, will begin beta-testing its anticipated upgrade next month. 
The company is adding adapters for Microsoft Outlook and People- 
Soft. It also plans to improve the dashboard’s integration with Micro- 


soft Project. Expect to see some modifi- 
cations to the user interface, such as ap- 
proval buttons appearing at both the top 
and bottom of the scrolling screens. 
William Farrow, CIO at the Chicago 
Board of Trade and a user of Kintana 
Dashboard, said an adapter to the general 
ledger portion of PeopleSoft “would be some- 
thing really hot” for his company because it 
has done littie customization 
to its PeopleSoft application 
and would be able to quickly 
adopt the upgrade and roll IT 
project changes into the cor- 
porate general ledger. ® Al- 
though CRM giant Siebel Sys- 
tems Inc. is getting knocked 
around these days by its much 
smaller ASP competitors, 
such as SalesForce.com Inc. 
and UpShot Inc., larger com- 
panies still prefer it. At least 
that’s what CIOs were saying 
at Computerworld’s Premier 
100 IT Leaders Conference 
last week. Even Jay Gardner, 
CIO at BMC Software Inc. in 
Houston, whose company 
bombed its first two attempts 


in Plymouth 
Meeting, Pa., this 
week ships the X3 
ica cet ROL ALC 
Contact, which gives 
remote sales and 
ies ec Clay 
access to ACT 5 or 6 
Peete ice 
$199 per user. This 
NTs) se) a 
for Pocket PCs, inte- 
grates with HTML 
editors and increases 
the security features. 


to install Siebel, said BMC evaluated the 
ASP approach after two failed Siebel in- 
stalls, but “we felt the ASP model would not 
give us the control, agility or scalability to go 
where we wanted to go.” Third time be- 
ing the charm, BMC now has 3,500 users 
of Siebel 6.3, and Gardner said the com- 
pany will upgrade to Version 7.05 this 
summer. In fact, when the upgrade is 
complete, the Siebel applica- 
tion running on an Oracle 
data warehouse will be the 
primary repository for all 
corporate data. Maybe “the 
end of software,” a Sales- 
Force.com marketing 


= Hype prepares us for the 
future, suggests Tim Howes, 
CTO at Opsware Inc. in Sun- 
nyvale, Calif. But what if the 
future is already here? Com- 
panies like IBM, Hewlett- 
Packard Co. and Sun Micro- 
systems Inc., with their vari- 
ations on utility computing, 
“are marketing their vision 
of what data center comput- 
ing will look like in three to 





mantra, isn’t so nigh after all. 





www.computerworld.com 


five years,” he says. Howes doubts that it 
will resemble what the major vendors are 
betting on. That’s because these Big 
Three vendors have all built their utility 
model around big iron. But Howes pooh- 
poohs that idea. “It’s more expensive taking 
the mainframe approach than going down to 
{computer retailer] Fry’s and buying an- 
other inexpensive server,” he claims. 
“They’re more reliable and just plain 
cheaper, too.” Furthermore, he argues, a 
lot of what the Big Three are selling al- 
ready exists, such as load-balancing and 
shared-server pools, and companies are 
already handling planned surges (Super 
Bowl-type events) and unplanned surges 
(such as 9/11) in resource demand. His 
view, of course, is tainted by a different 
sales pitch, which is that Opsware system 
management software lets you manage 
scads of small servers with far fewer re- 
sources. Howe boasts that a single sys- 
admin can “easily handle 100 machines” 
with agents called Intelligent Software 
Modules (ISM). These ISMs have to be 
written for each program running on the 
server. Currently, Opsware has 60 ISMs, 
but it will have a “couple hundred” by 
year’s end, Howe says. ® You might want 
to get some control over all those Fry’s shop- 
pers by installing Frictionless Sourcing 
3.0, a policy-based procurement package 
that helps manage spending that doesn’t 
always go through the purchasing depart- 
ment. Available this week from Friction- 
less Commerce Inc. in Cambridge, Mass., 
the upgrade includes a handful of new 
modules, including spend analysis and 
workflow management. It can also do de- 
mand aggregation so large companies 
with multiple locations buying the same 
products can build a single large pur- 
chase order for a better deal. And global 
companies now can have workers review 
a single purchase in their local languages 
and currencies. D 





Sockeye Upgrades WAN Routing Tools 


Sockeye installs its route- 
control appliances at cus- 
tomer sites and manages them 


BY MATT HAMBLEN 
Sockeye Networks Inc. today 
will release an upgrade of its 
wide-area network routing- 
optimization software that’s 
designed to support the com- 
plex network billing models 
used by companies that rely 
on multiple Internet service 
providers (ISP). 

With the new capabilities 
built into Version 3.0 of Sock- 
eye’s GlobalRoute technology, 
companies that use more than 
one ISP can automatically set 
| up optimal routes for network 








traffic, based on the terms of 
their contracts. Network man- 
agers can use the information 
to move traffic to faster or 
cheaper links and to help re- 
negotiate ISP contracts when 
they come up for renewal, 
Sockeye officials said. 

The Waltham, Mass.-based 
company is the second vendor 
in the emerging market for 
route-control technology to 
announce an upgrade in re- 
cent weeks. Fremont, Calif.- 
based netVmg Inc. last month 
shipped a new release of its 





Flow Control Platform soft- 
ware and added a pair of low- 
end route-control appliances. 

Other companies that offer 
technology to help users find 
the fastest and cheapest routes 
for data traffic over WAN links 
include RouteScience Tech- 
nologies Inc. in San Mateo, 
Calif., and Proficient Systems 
Inc. in Atlanta. But Sockeye is 
the only vendor offering those 
capabilities as a managed ser- 
vice, said Charles Rutstein, an 
analyst at Forrester Research 
Inc. in Cambridge, Mass. 





for monthly fees that start at 
$4,000. 

Digital West Networks Inc., 
an IT hosting company in San 
Luis Obispo, Calif., has been 
using GlobalRoute 3.0 for 
about a month to help set up 
optimum routing for the data 
that’s handled by its four ISPs, 
said Chief Technology Officer 
Josh Richards. 

“It’s in our interest to get 
our customers’ traffic pushed 
as fast as possible, and this 
software has provided a differ- 
entiator for us,” he said. B 





Your Enterprise Monday 10:32 A.M 


Now you can know 
what, when, where 
and how data change 
has occurred. 


Tripwire® assures the integrity of your data 
and gives you the ability to effectively pinpoint 
and manage undesired change across all your 
servers and network devices. By establishing 
a baseline of data in its known good state, 
Tripwire software monitors and reports any 
changes to that baseline and enabies rapid 
discovery and recovery when an undesired 
change occurs 


Maximize System Uptime 

@ Identify change quickly 

™ Enable quick restoration to a desired state 
@ Eliminate risk and uncertainty 


Failsafe Foundation for Data Security 
@ Ensure the integrity of your data 

@ Enable detailed audit reporting 

@ Granular visibility and control 


Lower Costs and Frustration 
@ Greatly reduces the time it takes to 
find and diagnose problems 


© Copyright 2003. Tripwire and the Tripwire logo are registered trademarks of Tripwire, Inc. 


10:33 A.M. 


Tripwire's data integrity assurance solutions 
are the only way to have 100% confidence 
that your systems remain uncompromised 

In the event of a change in state, you'll know 
exactly what, when, where and how change 
has occurred so you can recover quickly 


For a FREE 30-day fully-functional demo 
and copy of the white paper “Data Integrity 
Assurance in a Layered Security Strategy...”, 
call toll-free: 1-800-TRIPWIRE (874.7947) 
or visit http://enterprise.tripwire.com today! 


THE DATA INTEGRITY ASSURANCE COMPANY 
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Serial SCSI Promises 
Faster I/O in Servers 


Drive vendors set 
shipment plans as 
spec OK nears 
BY LUCAS MEARIAN 

N IT STANDARDS 

body is close to rati- 

fying a new serial 

interface specifica- 

tion for SCSI disk drives that’s 
expected to speed up I/O 
throughput in servers and 
could eventually challenge Fi- 
bre Channel technology’s 
share of the high-end disk ar- 
ray pie. 

The serial-attached SCSI 
specification is expected to be 
approved during the second 
quarter by the T10 technical 
committee of the Washington- 
based International Commit- 
tee for Information Technolo- 
gy Standards. Disk makers 
such as Seagate Technology 
LLC and Maxtor Corp. last 
week said they plan to begin 
shipping serial SCSI drives to 





| standard disk-drive 


| rays, according to 


| system vendors by year’s end 


The IP-based technology 
will support faster I/O 
throughput than the current 
parallel SCSI interface does, 
said Gordy Lutz, a product 
marketing manager at Scotts 


| Valley, Calif.-based Seagate. 


Serial SCSI is expected to 
replace its parallel 
predecessor as the 


interface in most 
servers as well as 
in workstations 
and low-end to 
midrange disk ar- 


John Lohmeyer, the T10 tech- 
nical committee’s chairman. 


| Drive’s Advantages 


But the new drives will aiso 
offer faster I/O speeds than Fi- 
bre Channel devices do, Loh- 


| meyer said. And like Fibre 


Channel technology, serial 


| SCSI drives will have dual I/O 


ports for fail-over purposes 


and will support simultaneous 
send-and-receive operations. 
Seagate, which makes about 
95% of the Fibre Channel 
drives used in high-end disk 


| arrays, said it expects serial 


SCSI and Fibre Channel to 
complement each other. But 
Milpitas, Calif.-based Maxtor 
is betting on serial 
SCSI to replace Fi- 
bre Channel disk in 
five to 10 years. 
Because the 
specification sup- 
ports point-to- 
point connections 
between disks and 
controllers through the use of 


TWO FOR ONE 


Users will be able to combine 

serial SCSI drives and less 

expensive ATA devices in 

servers and disk arrays 

© QuickLink 36708 

www.computerworld.com 
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| so-called extenders, there 


should be no competing de- 
mands to slow down the flow 


| of data, as there are on con- 


ventional system buses, said 
Brendan Collins, director of 
product marketing at Maxtor. 
Lev Gonick, CIO at Case 
Western Reserve University in 


| Cleveland, said the ability to 





open up the internal band- 
width of servers is serial 
SCSI’s greatest potential fea- 
ture for improving his school’s 
operations. 

Mark Price, director of 
enterprise architecture at 
Carlson Companies Inc., said 
serial SCSI will become inter- 
esting to the Minneapolis- 
based travel industry con- 
glomerate “at the point when 
the cost of it becomes equal to 
or less than what we’re cur- 
rently using.” 

Carlson now uses a Fibre 


| Channel storage-area network 


(SAN) with multiprotocol 


SERIAL SCSI 


8 36 bit/sec. throughput, with 
66 bit/sec. planned by 2006 


# Includes dual I/O ports 


@ Supports external cable 
lengths of up to 6 meters 


= Uses a direct-connect architec- 
ture with “extenders” to link mul- 
tiple disk drives 


Veritas Upgrades Backup Software, Looks to Diversify 


BY LUCAS MEARIAN | 
Veritas Software Corp. last 
week upgraded its flagship 
data backup technology. But 
Veritas, the second-largest 
vendor of storage manage- | 
ment tools, is also embarking 
on an acquisition-fueled strat- 
egy to expand into other IT 
management technologies. 

The plan to augment prod- 
ucts such as its NetBackup 
software with new server and 
application management tools 
is aimed at helping Mountain 
View, Calif.-based Veritas 
compete against more diversi- 
fied rivals such as EMC Corp., 
Computer Associates Interna- 
tional Inc. and IBM. 

Veritas officials said their 
goals are to offer IT adminis- 
trators a bundled suite of man- 
agement tools and increase 
the company’s annual revenue 
from $1.5 billion to $5 billion 





| makes a lot of sense. For ex- 


over the next three years. 
To some users, the plan 
ample, Tom Guthrie, vice 
president of technology oper- 
ations at Atlanta-based Cox 


aCe iam 


Veritas has announced the 
following acquisitions: 


PRECISE SOFTWARE 
SOLUTIONS LTD., which selis 
application performance man- 
agement software; due to be 
completed by midyear. 
JAREVA TECHNOLOGIES INC., 
a developer of software for re- 
mote provisioning, deployment 
and configuration of servers; 
bought in December. 


STORAGE REPORTER, a data 





Communications Inc., said 


| there’s definite value in the di- 


rection Veritas is taking. 
“With all of our vendors, 
we’ve encouraged them to go 
up the value chain in areas 
they’re good at, and we’re hap- 
py to interact with them about 
that,” Guthrie said. He recent- 
ly standardized backup opera- 
tions on Cox’s OTB storage- 
area network (SAN) by in- 


| stalling NetBackup. 


Veritas has announced three 


| acquisitions since November, 
| adding products in areas such 


as server provisioning and ap- 
plication performance man- 
agement (see box). 

Bill Augustadt, chief tech- 
nology officer at BlueStar So- 
lutions Inc., said the ability to 
pool server capacity to ad- 
dress application needs and 
then monitor performance on 


| the fly should help the Cuper- 





tino, Calif.-based application 
outsourcing firm more effi- 
ciently control its services ac- 
cording to customer needs. 
“Any automation we can do 
will allow us to scale across 
platforms with fewer people 
to manage them,” said Aug- 
ustadt, who uses various Veri- 
tas products to handle data 
backups on a 160TB SAN. 
Veritas’ big task this year is 
to “consolidate and integrate 
the companies we acquired,” 
said Jeremy Burton, the com- 
pany’s chief marketing officer. 
“But I don’t think it will be 
technology that hinders us.” If 
problems do arise, they most 
likely will be related to sales 
execution issues, he noted. 
Anders Lofgren, an analyst 
at Giga Information Group 
Inc., predicted that other stor- 
age software vendors will 
adopt similar expansion plans. 
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switches made by San Jose- 
based Nishan Systems Inc. to 
connect mirrored data centers 
over IP. But, Price said, “we 
think Fibre Channel is proba- 
bly a shorter-lived technology. 
It’s very expensive and com- 
plicated to implement.” 

Serial SCSI will likely be- 
come “an alternative to doing 
Fibre Channel in [SANs], but 
it’s not the panacea,” said 
Jamie Gruener, an analyst at 
Gartner Inc. in Stamford, 
Conn. “It’s meant to replace 
parallel SCSI. It’s not meant to 
be a complete replacement of 
everything.” D 


aie Le 


# 2G bit/sec. throughput, with 
4G bit/sec. planned by 2005 


= Includes dual |/O ports 


# Supports external cable 
lengths of up to 15 meters 


@ Uses arbitrated loops or loop- 
switched architectures to link 
multiple disk drives 


But, he added, “for Veritas to 
build credibility outside of the 
storage management space — 
that will take some time.” 

In January, Veritas reported 
a fourth-quarter net loss of 
$49 million on revenue of $405 
million. But the company said 
business was better than ex- 
pected, and it reported a $57 
million profit for 2002 as a 
whole, compared with a net 
loss of $643 million for 2001. 

NetBackup 4.5 includes a 
new feature called Instant Data 
Recovery, which lets users 
recover data directly from 
disk drives instead of from 
tape devices, Veritas said. The 
upgrade also streamlines the 
process of storing Microsoft 
Exchange e-mail attachments. D 


MORE TO WORK WITH 


Cox Communications says NetBackup 
has helped increase use of its available 
storage capacity: 


QuickLink 36521 
www.computerworld.com 





If you're busy monitori 
who’s watching yo 


The new HP ProLiant DL740 
8-way with hot-plug 
RAID memory. 


+ Ultradense 4u modular chassis 
with up to eight Intel” Xeon™ MP 
1.5 GHz or 2.0 GHz processors 

- Up to 64GB addressable memory 

- Groundbreaking F8 chipset 

+ 6-64 bit/100 MHz PCI-X slots 

- Integrated Lights-Out Standard 
(iLO) for Remote Server Mgmt 


The new HP ProLiant DL760 
G2 8-way with hot-plug 
RAID memory. 


- Up to eight Intel” Xeon™ MP 
1.5 GHz or 2.0 GHz processors 
- Up to 64GB addressable memory 
- Groundbreaking F8 chipset 
+ 10-64 bit/100 MHz PCI-X 
1-64 bit 33 MHz slots 
- Remote Insight Lights-Out Edition II 
(optional) for Remote Server Mgmt. 


your servers, 
r business? 


What challenges do you face today? Decreasing budgets? The 
lurking possibility of downtime? It’s hard enough to focus on 
moving your business forward when you're constantly looking 
over your shoulder to see if everything is up and running 


Besides, that’s the job of the new HP ProLiant DL700 series 
running Intel” Xeon™ MP processors. An adaptive infrastructure 
begins with these HP Proliant servers which come equipped 
with tools that predict, self-diagnose and fix many fault 
conditions. And now with hot-plug RAID memory exclusively 
from HP. you can add or replace DIMMs without turning 
your systems off. Both work with the HP ProLiant Essentials 
Foundation Pack featuring Insight Manager 7 software which 
monitors and controls your infrastructure for maximum uptime 


At the end of the day, you'll have more control over your 

infrastructure, help avoid unplanned downtime and reduce 
overall maintenance costs. Not to mention freeing yourself 

up for more important things 


To learn how HP Proliant servers can be a 
part of maximizing your company’s uptime, 
download CMP’s executive brief on high availability 
at www.hp.com/go/proliant85 or call 
1-800-282-6672, option 5, and mention code YPH. 
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Qwest Execs Face 
Fraud Charges 


The Justice Department said a 
Denver grand jury indicted four 
former Qwest Communications 
international Inc. executives on 
corporate accounting fraud 
charges. The Securities and Ex- 
change Commission also filed 
civil fraud charges against the 
four as well as three other for- 
mer executives and Qwest’s cur- 
rent senior vice president of fi- 
nance. Denver-based Qwest said 
it’s cooperating with the probe. 


Bankrupt Peregrine 
Turns to Mediator 


Peregrine Systems Inc. said it 
has agreed to use a mediator to 
try to resolve differences with its 
creditors over a bankruptcy reor- 
ganization plan filed by the San 
Diego-based asset management 
software vendor. In return, the 
creditors will stay a motion seek- 
ing to end Peregrine’s exclusive 
right to propose a reorganiza- 
tion. Peregrine sought Chapter 11 
protection in September. 


Microsoft Upgrades 


XP Rollout Tools 


Microsoft Corp. updated tools 
that are designed to help corpo- 
rate users speed up rollouts of 
Windows XP Professional aiid 
Office XP. The tools, available at 
no cost on Microsoft's Web site, 
include new features for testing 
application compatibility and 
scanning PCs for missing securi- 
ty updates. Microsoft also began 
beta-testing a tool kit for devel- 
oping peer-to-peer applications. 


Short Takes 


COMPUTER ASSOCIATES INTER- 
NATIONAL INC. plans this week 
to release Version 7 of its eTrust 
Antivirus software, which bun- 
dies together several tools. . . . 
ENTERASYS NETWORKS INC. in 
Rochester, N.H., said it has set- 
tled an accounting investigation 
launched by the SEC last year. 


NEWS 


New apps will also include increased 
support for Web services, mobile users 





BY MARC L. SONGINI 
AP AG is readying an 
upgrade of its custo- 
mer relationship man- 
agement (CRM) soft- 
ware that officials said will de- 
| liver more industry-specific 
functions and increased ties to 
other applications. 
SAP plans to release the 
next version of its mySAP 
CRM software in June. As part 
| of the upgrade, it will expand 
the ability of the applications 
to use Web services technolo- 
gy to take data feeds from 
both internal and external sys- 
tems, said Peter Zencke, a 
member of SAP’s executive 
board. That will let users draw 
on more information and bet- 
ter exploit analytical CRM 
tools to improve their interac- 
tions with customers, he said. 
The new release will also 


Continued from page I 


dig through data repositories 
for customer information and 
then dump the data into Excel 
spreadsheets in order to con- 
duct analyses, Carroll said. 
The analytical applications 
now take feeds directly from 
Honeywell’s Siebel-based call 
center and sales force automa- 
tion systems as well as from 
other data sources. In addi- 
tion, the dashboard user inter- 
face is easy to use and config- 
ure, Carroll said. “We had 
many pessimistic people here, 
but now it’s ‘click’ and take 
off,” he added, referring to 
prompts that are built into the 
software to help automate 
data-analysis procedures. 
CRM analytics “has been 
the next ‘new’ thing that never 
really happened for the past 
few years,” said Erin Kinikin, 
an analyst at Giga Information 





CRM Analytics 





include built-in business proc- 
esses specific to 22 vertical in- 
dustries, Zencke said. For in- 
stance, SAP plans to expand 
its marketing campaign man- 
agement functions for compa- 
nies in the consumer packaged 
goods market. 


Seeking a Remedy 
Eric Bloom, vice president of 
IT at Endo Pharmaceuticals 
Holdings Inc. in Chadds Ford, 
Pa., uses SAP’s R/3 enterprise 
resource planning software 
and said he would like to see 
SAP roll out a CRM module 
for the pharmaceuticals indus- 
try. The ability to tie together 
customer data from multiple 
systems would be a big advan- 
tage for Endo, he noted. 
Bloom said SAP has been 
trying to put together such a 
product, but he added that it’s 


Group Inc. in Cambridge, 
Mass. But that could change 
over the next couple of years, 
now that San Mateo, Calif.- 
based Siebel and other CRM 
vendors are moving to embed 
analysis capabilities into their 
applications, she said. 

In addition to Siebel’s analy- 
sis technology, PeopleSoft Inc. 
in December announced a 
marketing module with 30 
built-in analytical capabilities. 
SAP AG said it plans to beef 


Analytics in Action 





CRM Additions 


SAP said the next release 
of mySAP CRM will: 
LET mobile devices access its full 
range of CRM functions. 


INCLUDE more features tailored 
for different vertical industries. 


USE Web services to take data 
feeds from more sources. 


PRESENT data from multiple 
systems via a portal interface. 


hard for vendors to create a 
single set of CRM applications 
that can meet the needs of 
companies with different busi- 
ness processes, even within 
the same industry. Endo cur- 
rently uses some homegrown 
CRM tools, Bloom said. 

An SAP spokesman said 
pharmaceuticals is one of the 
vertical industries that the 
CRM upgrade will address 
through functionality such as 


up the analysis features in its 
CRM software as part of an 
upgrade due in June (see relat- 
ed story, above). 

The Mutual of Omaha Com- 
panies is in the initial phases 
of rolling out real-time analyt- 
ical CRM software developed 
by San Mateo-based E.piphany 
Inc. The insurer has already 
implemented E.piphany’s sales 
and marketing tools and is 
now phasing in its marketing 
and campaign analytics, said 


How Honeywell Aerospace’s analytical CRM system works: 


= The company has installed Siebel's analytical software on top of the 
vendor's eales force automation and cali center applications. 
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SAP Readies CRM Upgrade 
‘With Vertical Industry Focus 


capabilities for analyzing con- 
tested charges and managing 
drug-sampling procedures. 

SAP’s increased vertical- 
market focus shows that it rec- 
ognizes there’s no such thing 
as one-size-fits-all CRM, said 
Erin Kinikin, an analyst at 
Giga Information Group Inc. 
in Cambridge, Mass. Many 
users have struggled to apply 
CRM technology to their spe- 
cific business needs, she said. 

MySAP CRM in particular 
could appeal to R/3 users be- 
cause of its tight integration 
with SAP’s back-office appli- 
cations, Kinikin added. 

SAP will make all its CRM 
functionality accessible to end 
users with mobile devices for 
online or off-line processing, 
Zencke said. Currently, hand- 
held devices are limited to us- 
ing SAP’s sales force automa- 
tion tools. The company will 
also make R/3 and its other 
business applications hand- 
held-accessible, Zencke said. 9 


John O’Donovan, first vice 
president of e-business part- 
nership at Mutual of Omaha. 

The analytics project should 
be wrapped up by midsum- 
mer, O’Donovan said. When 
it’s installed, the software will 
let the company use CRM ana- 
lytics to modify its marketing 
campaigns on the fly, based on 
suggestions derived from indi- 
vidual customer profiles. 

Mutual of Omaha already 
uses software from SAS Insti- 
tute Inc. in Cary, N.C., to do 
data mining and customer seg- 
mentation work that can help 
target its marketing programs 
at specific groups. 

But O’Donovan said the 
two products will comple- 
ment each other. While the 
SAS technology addresses 
historical trending, E.pipha- 
ny’s software will be able to 
help call center workers make 
marketing decisions when 
they’re on the phone with 
customers. D 
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Outsourcing Debate 


Driven by Cost, Agility, 


IT managers find offshore outsourcing 
to bea compelling way to cut costs 





BY THOMAS HOFFMAN 
SCOTTSDALE, ARIZ 
OST PRESSURES and 
the need for in- 
creased : 
business 
agility are leading a 
growing number of 
companies to shift 
more of their IT work 
offshore, according to pan- 
elists who discussed sourcing 
issues at the Computerworld 
Premier 100 conference here 
last week. 

On average, 60% of IT 
spending now goes to external 
companies for hardware, soft- 
ware and services, while 40% 
goes to staff, said Bart Perkins, 
the panel moderator and man- 
aging partner at Leverage 
Partners Inc., a Louisville. Ky.- 
based CIO consulting firm. 
The percentage of external 
spending will continue to 
grow as more companies turn 
to offshore outsourcing, said 
Perkins, who is also a Com- 
puterworld columnist. 

That’s the trend at Agilent 
Technologies Inc., a spin-off 
of Hewlett-Packard Co., which 
outsources about 35% of its IT 
work. Two years from now, it 
expects to outsource about 
60% of its IT functions, partic- 
ularly in areas such as applica- 
tion development and mainte- 
nance. The reason: Seven con- 
secutive quarterly losses are 
driving the Palo Alto, Calif.- 
based company to reduce 
costs and become ever more 
agile in the market, said Marty 
Chuck, CIO at the scientific 
instrument maker. 

The cost of labor in places 
such as India is “too com- 
pelling,” said Chuck, referring 
to a figure cited by Merrill 
Lynch & Co. Chief Technology 
Officer John McKinley in an 
earlier conference session. 
McKinley estimated the sav- 


T LEADERS 2003 


| ings from offshore outsourc- 
| ing of IT at 40% to 50%. 

| Currently, 90% of Agilent’s 
| IT workforce is based in the 


cee ae U.S. and Europe. By 


2005, Chuck sees 
that ratio flipping, 
with just 30% of 
the IT workforce 
remaining in the 
US . and Europe. 

| Agilent isn’t alone. A few 

| years ago, Northbrook, Iil.- 
based Allstate Insurance Co. 

| created a wholly owned IT 
subsidiary in Northern Ireland 
| to help cut IT costs and allow 


“Traffic cop’ says 
company making 
strides toward goal 


BY MARK HALL 
SCOTTSDALE. ARIZ 
Listeners praised Microsoft 
Corp.'s recent efforts to im- 
prove product security and 
patch management after hear- 
ing Scott Charney, the compa- 
ny’s chief security strategist, 
describe them in detail. But 
they agreed that Microsoft 
| hasn’t yet shown it can reach 
| its own security goals. 
Speaking here at the Com- 
puterworld Premier 100 con- 
ference last week, Charney 
explained how, as part of its 
Trustworthy Computing ini- 
tiative, Microsoft delayed the 
release of products such as 
Windows 2003 and Visual Stu- 
dio .Net. That delay, he said, 
gives developers who have 
been trained in areas such as 
threat modeling and penetra- 
tion testing a chance to review 





| years 








| offshore vendors “ 


PHOTOGRAPHY BY ASA MATHAT 


faster response to competitive 
pressures. Even with 900 high- 
ly skilled IT employees there, 
CTO Cathy Brune finds herself 
struggling with whether to 
shift operations elsewhere. 

“Anytime you go outside 
your four walls, there’s risk as- 
sociated with it,” said Brune. 
“But if you have a very smart 
team, you can figure things out 
and learn from others.” 

“We'll be doing more out- 
sourcing in the next two 
.” said George Lin, vice 
president and CIO at Docu- 
mentum Inc., a Pleasanton, 
Calif.-based enterprise con- 
tent management software 
vendor. Both near-shore and 
are becom- 


Microsoft Security 
Czar Critiques Efforts | 


the software code for flaws. 
The company also added 
two layers of security verifica- 


| tion outside of the product 


groups, because making devel- 
opers in the product groups 
responsible for security “was 
like having the fox guarding 
the henhouse,” Charney said. 

And despite complaints 
from some corporate users, 
Microsoft products will now 
be shipped with maximum 
security features turned on, 
Charney said. 
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ing more savvy about under- 
standing my unique business,” 
said Lin. That’s one reason he 
expects his company to move 
a growing portion of its soft- 
ware quality assurance and 
maintenance offshore. 

While offshore outsourcing 
might be attractive from a cost 
standpoint, there are wrench- 
ing cultural and political issues 


Those moves are essential, 
according to Phil Dunkelberg- 
er, CEO of PGP Corp., a soft- 
ware security provider in Palo 
Alto, Calif. “Now they have a 
guy who is a traffic cop who 
does not have money at stake,” 
he said of Charney. 

Dunkelberger went on to 


| praise the idea of shipping 


products with security fea- 
tures enabled by default. 
“Locking down products when 
they’re released is good, even 
when faced with resistance 
from larger users,” he said. 

But he expressed disap- 
pointment that Charney didn’t 
discuss the idea of opening 


| up the security elements of 


Microsoft's products to open- 
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that IT managers have to iron 
out with domestic IT employ- 
ees. “You have to be honest 
with people and [tell them] 
what you’re planning on do- 
ing,” said Brune. It’s also im- 
portant to help them improve 
their technical skill and busi- 
ness acumen to keep them 
valuable to the organization. 

Retaining technical knowl- 
edge of certain technologies 
that are sent offshore is a must 
as well, said Chuck. “If you 
don’t retain some of that 
knowledge in-house, it’s al- 
most cost-prohibitive to bring 
it back in,” he said. 

For its part, Agilent plans 
to keep people with business 
process and project manage- 
ment expertise. In addition, it 
has opted not to outsource its 
data center operations, since a 
recent benchmarking exercise 
revealed that Agilent can run 
its back-office operations more 
cost-effectively than service 
providers can. D 


source evaluation. PGP’s 
source code is released for 
open-source review before it’s 
sold commercially. 

RA Vernon, chief security 
officer at Reuters America Inc. 
in New York, said that before 
Microsoft can achieve the 
goals of its Trustworthy Com- 
puting initiative, “major cul- 
tural change has to take place” 
within Microsoft. 

Charney acknowledged that 
that was true, specifically in 
relation to the vendor’s patch 
management procedures, 
which he characterized as 
“not good today at all.” 

He said Microsoft's decen- 
tralized management ap- 
proach, while “wonderful” in 
many respects, is an impedi- 
ment to effective patch man- 
agement. For example, the 
company had eight patch in- 
stallers, and some tools can’t 
determine whether a patch has 
been installed properly or not. 

That, he said, will change 
with the release of Longhorn, 
the code name for the next re- 
lease of the Windows operat- 
ing system. With that release, 
which isn’t expected before 
mid-2004 at the earliest, a sin- 
gle patch installer will exist. D 
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ClOs Discuss Strategies for 
Demonstrating Value of IT 


IT chief warns 
against overselling 
projects to execs 


BY THOMAS HOFFMAN 
SCOTTSDALE, ARIZ 

CIOs often have trouble com- 
municating to senior manage- 
ment the value IT investments 
can deliver to their organiza- 
tions. After an upgrade to his 
company’s global network in- 
frastructure last year, Baxter 
International Inc. CIO John 
Moon decided to take matters 
into his own hands. 

After the networking proj- 
ect was done, Moon handed 
each of the business leaders at 
a postproduction senior man- 
agement meeting a yellow 
cable. He then told them, “No 
matter where you are in the 
world [at any of Baxter’s 300 
offices], plug this into the wall, 
and you'll be connected” to 





ad a 


the company’s global network. 


The tactic — as well as the 
message — “was really eye- 
opening for them,” noted 
Moon, whose Deerfield, IIl.- 
based health care company 
has a $350 million IT budget 
for 2003. 

Moon was on a panel of IT 
leaders who discussed IT 
investment and value strate- 
gies at the Computerworld 
Premier 100 conference here 
last week. 

At Avon Products Inc., Se- 


eae said ClOs should stay humble despite project success. 


nior Vice President and CIO 
Harriet Edelman has squeezed 
business value out of optimiz- 
ing systems and business proc- 
esses in critical areas such as 
procurement and merchandis- 
ing. Those moves have yielded 


| $10 million in annualized bene- 


fits for the New York-based 
beauty products giant, she 


| said, thanks in large part to her 


group’s use of IT portfolio 

management techniques. 
Still, Edelman was quick to 

acknowledge that it’s impor- 


tant for CIOs and other IT 
leaders to avoid being arro- 
gant or evasive when it comes 
to communicating the value of 
IT to senior management. 

“It’s an area that’s rife with 
some danger,” she said. 

Even when IT initiatives 
deliver huge returns, Edelman 
said, the trick is to “stay hum- 
ble and stay within their [busi- 
ness] point of view.” 

CIOs also sometimes make 
the mistake of overselling IT 
projects to top brass, Moon 
said. That’s one reason why 
Baxter has a staff member 
whose role is to communicate 
the value that IT can deliver, 
he said. 

Another way CIOs can 
get senior management to in- 
vest more in IT is by collabo- 
rating more closely with busi- 
ness-unit leaders on specific 
projects. 

By persuading her business 
peers to take the lead on more 
IT/business initiatives, Edel- 
man said she has helped in- 
crease Avon’s spending on 
strategic and transformational 
IT efforts by 30% during the 
past two years. DB 





identify, Kill Nonessential 
Projects, ClO Recommends 


Narrow focus to a 
few issues, he says 


BY JULIA KING 
SCOTTSDALE, ARIZ 

If he were writing a song about 
his first 18 months in the top 
IT post at BMC Software Inc., 
CIO Jay Gardner might call it 
“I Learned It the Hard Way.” 

Gardner, who spoke last 
week at the Computerworld 
Premier 100 conference here, 
held sales and operations po- 
sitions at Houston-based BMC 
before becoming CIO. In that 
post, Gardner said he had to 
Jearn from his mistakes. 

The first of those, he said, 
was trying to solve too many 
problems at the same time. 
Having reviewed a 2002 Gart- 
ner Inc. study of key issues on 
CIOs’ minds, Gardner took a 
crack at more than a dozen — 
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too many, as it turned out. He 
soon switched gears and took 
direct aim at the top three is- 


| sues: aligning IT and the busi- 


ness, providing guidance and 
leadership about technology 
to top executives, and proving 
IT’s value. 

“These are absolutely the 





top three things to worry 
about,” Gardner told a packed 
breakout session titled “IT 
Governance and Organization- 


| al Effectiveness.” 


“It’s not so much about the 
IT organization, but about 


| how I personally spend my 


time,” he said. How and where 
CIOs spend their time will re- 
flect directly on their success 
in meeting their top three 
challenges, he added. 

Topping the issues on which 
Gardner said he spends the 
most time are IT governance, 
people and resources manage- 
ment, and IT architecture. 
Rounding out the list are busi- 
ness alignment and services 
management. 

“When all five of these are 
working together, you can 
drive good alignment and IT 
value,” he said. 

Among the key challenges 


| Gardner faced when he came 


into the C1O’s job was priori- 


| tizing the various IT projects 


under way at the software 


| maker. A companywide survey 
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showed that 128 different proj- 
ects were already in progress, 
many of which had no busi- 
ness owner and no return on 
investment attached to them. 
His advice to other CIOs: 


| “Find stuff not to do. Cross off 
| projects from the list.” 


One of Gardner’s key 


| achievements so far has been 
| repositioning IT workers to 


work on projects for which 
they have the necessary skills. 
“Fifteen months ago, we 
took a skills inventory and 
found that we had a lot of tal- 
ent that was not being used by 
people in their current jobs,” 
he said. BMC redeployed 
workers accordingly, boosting 
morale in the process. D 


“| think the single 
biggest threat to my 
environment, and 
probably to my job as 
well, is the dual threat 
of data security and 
data privacy.” 

DOUG LEWIS, EXECUTIVE 

VICE PRESIDENT AND CIO, SIX 
CONTINENTS HOTELS INC 


“I can be in Redmond 
in two hours. | know 
where I’m going and 
know who to yell at.” 
DAMIEN BEAN, VICE PRESIDENT 
OF CORPORATE SYSTEMS, HILTON 


HOTELS CORP., ON WHY HE FAVORS 
MICROSOFT OVER LINUX 


“Windows has gotten 
so robust as to cut 
out low-end Unix. 
And not-so-low-end.” 


ROGER J. JONES, Ci0 
FORTIS HEALTH 


“| fired my top 
15 managers.” 


BILL FARROW, EXECUTIVE 

VICE PRESIDENT AT THE CHICAGO 
BOARD OF TRADE, ON HOW HE 
CONVINCED BUSINESS EXECS 
THAT HE WAS SERIOUS ABOUT 
TURNING AROUND IT 
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MARYFRAN JOHNSON 


eeping the Faith 


HEN WILL THE accelerating pace of 
change finally overwhelm us? 

That one question — and the as- 
tonishing answer — will resonate 


with me long after the 
end of Computerworld’s 
Premier 100 IT Leaders 
Conference, which drew 
more than 500 CIOs, 
CTOs and senior IT man- 
agers to Arizona last 
week [QuickLink al660]. 

When Andre Mendes, 
chief technology integra- 
tion officer at PBS, posed 
that question, 77% of the 
audience replied, “Never.” 

Now that’s faith in IT. 

And in people. I take that as a most 
welcome sign in these trying times. 

It’s also one of the distinguishing 
characteristics of true leaders — 
something called “adaptive capaci- 
ty,” as Warren G. Bennis, one of our 
keynote speakers, so aptly put it. 
The best-selling author of On Be- 
coming a Leader and distinguished 
management professor at the Uni- 
versity of Southern California 
earned a prolonged standing ovation 
from our assembled IT leaders after 
his talk about what makes a true 
leader [QuickLink 36647]. 

I can’t do justice to his speech in a 
few sentences, but Bennis said the 
six core competencies that people 
want in their leaders are direction, 
trust, acknowledgment, hope, op- 
portunity for personal growth and 
results. “A sense of ‘We can do it!” 
is something leaders communicate 
to everyone around them, he said. 

Indeed, faith in IT is the tie that 
binds us in this industry. And I saw 
constant signs of hope and determi- 
nation at our gathering of IT lead- 
ers. In one of our audience polls 
about IT cost-cutting, for example, 
43% said they were focusing more 
on new projects that will grow the 
business than on ways to cut further. 

In my closing remarks at the con- 





ference, I borrowed 
some observations from 
a September 2002 col- 
umn by Computerworld’s 
Frank Hayes, titled “The 
Faith of IT” [QuickLink 
32660]. The heart of his 
column is about what IT 
people really believe in, 
and Frank’s thoughts are 
well worth paraphrasing: 


You believe in prog- 
ress, technology, infor- 
mation and business. 

You believe that new ideas and 
fresh approaches can be better than 
old ways and that technology can 
be used to make individuals more 
powerful and organizations more 
effective. 

You believe that we can use tech- 
nology to store and process infor- 
mation, but also to discover new in- 
formation we didn’t know, to see 
patterns we didn’t recognize before. 

You believe in communication 
and how it can bring people togeth- 





er to cooperate or compete. 

You believe that IT can bridge dif- 
ferences, level inequalities and offer 
opportunities. 

You believe in the new, the unfa- 
miliar, the different. (Even, on occa- 
sion, the overhyped and the un- 
proven.) 

But most of all, you believe in 
progress and change, that things can 
and will get better. That over time, 
our companies, our industries, even 
our societies, can be transformed by 
IT. So if you believe we can solve 
our problems, then you believe in 
the future. 

You believe that we can and will 
change the world. 


Frank’s words remind me of one 
of the greatest teachers I’ve ever 
known, who urged his students to 
“Go out and move the world an 
inch.” That takes more than hard 
work, more than technology or busi- 
ness expertise, even more than an 
adventurous, determined spirit. 

It takes faith that what you’re do- 
ing makes a difference. Everything I 
saw and heard last week among 
hundreds of your colleagues tells 
me that you are out there, moving 
the world an inch at a time. 

Keep the faith. D 
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Fight Threats 

From Within 
OU CAN’T PREDICT a 
security disaster, but 
you can prepare for 


one. The recent revelation 


that an intruder stole more 
than 8 million Visa, MasterCard, 
American Express and Discover credit 
card account numbers should fan the 
flames about the limits of IT security. 

That’s because even the best IT se- 
curity works only up to a certain level. 
Once past that level, your defenses 
will be breached, either by a technical 
gaffe or a human miscreant. When 
that happens, you must be able to put 
into action a preparedness plan. 

The plan should include the active 
participation of your corporate com- 
munications, legal and customer rela- 
tions departments as well as your ex- 
ecutive committee. In the wake of a 
breach, these people will all be turn- 
ing to you, the IT 
folks, to tell them 
what went wrong 
and what you're do- 
ing to fix the prob- 
lem. They’ll also be 
asking you for dam- 
age assessments and 
reports on third-par- 
ty contacts (because 
so much security 
work has been 
farmed out, to white- 
hat hackers, for ex- 
ample). For these and other reasons, 
you must have an internal and exter- 
nal communications plan ready for se- 
curity failures. 

Before you ever have a security 
breach, assemble the core group of 
specialists who are trained and pre- 
pared to deal with IT security as part 
of their job. Determine who among 
them are best suited to communicate 
internally with users, externally to 
customers and suppliers and, possibly, 
even to the media. Then train them. 
And have backup ready in case your 
spokesmen are away when a crisis is 
upon you. 

Prepare procedures to alert these 
key contacts on what information will 
be available, how to get it and who will 
be responsible for it. Make sure there’s 
a process for vetting information. 

Match the information with the au- 
dience. In the recent breach, the credit 
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card companies didn’t publicly reveal 
the name of the payment processor 
whose security was compromised, but 
surely the necessary people inside the 
credit card companies were briefed in 
detail. Remember that responding to 
a security breakdown is an informa- 
tion problem as well as a technical 
problem. Whe you tell and what you 
tell them is as important as who does 
the telling. 

In addition, security failures can 
quickly raise legal liability issues, as 
many financial service companies and 
health care providers have come to 
recognize. So it’s of paramount impor- 
tance for your company to speak with 
a chorus of coordinated voices. 

A good, well-tested plan will protect 
your company against charges of ig- 
noring a threat and make it easier to 
withstand a crisis when it occurs. D 


MICHAEL GARTENBERG 


Blogging 
For Fun and 


Profit 


F I WERE REMAKING The 

Graduate today, with 

Dustin Hoffman’s charac- 
ter as an IT professional who 


was looking to advance his 
career, the one word of advice I would 
give him would be: weblogs. 

Weblogs, those personal journals 
and information sites that are growing 
by leaps and bounds on the Internet, 
are a simpie way for an IT department 
to create some positive momentum 
for itself quickly and cheaply. Web- 
logs, or blogs as they’re usually called, 
allow for easy, direct and effective 
communication to a wide audience. 
Most important, the cost of starting an 
internal blog project is ridiculously 
low. Most blogging software can be 
acquired on a trial basis, so you can 
test to your heart’s content, and pur- 
chase costs are moderate as well. 
Here’s how to get started creating a 
corporate blog site. 

First, think “modest” and “discreet.” 
While I'd love to see the CEO of every 
company keep a public weblog (imag- 
ine reading what’s going on in the 
mind of Steve Ballmer, Scott McNealy 
or Carly Fiorina), that’s not likely to 
happen in the near future. In fact, I'd 
caution you about creating a blog site 
that can be viewed by the outside 


world (or even keeping a 
personal weblog that refers 
to your company’s activi- 
ties) without first going 
through a very thorough re- 
view process internally. 
There are already tales of a 
number of good people 
who have lost jobs because 
of corporate discussions on 
their weblogs. 
Instead of going for the 
full corporate monty from 
the start, first launch an in- 
ternal IT blog. Start slowly, 
as you would with any IT 
project. Create a beta blog 
that can be viewed only by IT man- 
agers, then open it to IT staffers be- 
fore you roll it out to the entire com- 
pany. Get a group of folks to volunteer 
to create your first series of weblogs 
and use the beta process to weed out 
the ones who don’t post often enough. 


Nothing is worse than a 
stale blog. 

Use your blog as a vehi- 
cle for communication. Ex- 
plain what’s going on in- 
side IT operations, link to 
interesting articles and 
create forums for internal 
discussions. While every- 
one is comfortable using 
PCs and most software, 
they still appreciate getting 
timely advice and opinions 
from experts in the field. 
Why shouldn’t they get it 
from you and your team? 

During the beta process, 

post at least three times a week, keep- 
ing your comments pithy and focused 
on a single point. Don’t make it avail- 
able to the entire firm until you have 
at least one month’s worth of content. 

Once your blog is established and 
you begin to find your voice, you 


a a 





| might want to advocate an external 


site. Explore how blog-based external 
communications can create more busi- 
ness initiatives. Lead by example, and 
champion the cause. Along the way, 
there’s a good chance for you to suc- 


| ceed and become a hero. That’s about 
| as good as it gets for IT these days. 


Communication via blogging is a 
powerful tool that truly leverages the 
power of the Web. In fact, I liked this 
idea so much, I did exactly what I out- 
lined above and helped launch Jupiter 
Research’s first weblogs at http:// 
weblogs.jupiterresearch.com. Check 


| them out and send me some feedback, 
| but more important, go download 


some software, find your voice and 
start blogging your way to glory. D 
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Commit to ROI, IT 


KNOW THAT MARK HALL was 

trying to stimulate thought by tak- 
ing a contrarian position in his col- 
umn “Forget RO!” [QuickLink 


35575] - at least | hope that’s what | 


he was doing - but he is way off 
base. | agree that pure ROI has 
some shortcomings in evaluating 
and prioritizing IT projects and can 
cause opportunities to be lost. The 
problem is that pure RO! doesn’t 
have a way to quantify a lot of the 
benefits that “your instincts, knowl- 
edge and experience” tell you will 
come from a particular IT initiative. 
And trying to quantify the benefits, 
costs and risks associated with an 
IT commitment is the only way to 
bring a level of discipline to what 
has been a hit-or-miss proposition 
based on gut feelings. 

Many ROlI-based efforts come 
up short because people aren't will- 
ing to put a value on the benefits 
that will be achieved by making the 
IT commitment. | was around in the 
1970s when people were installing 
Wang word processors, and they 
were basing their decisions on im- 
proved productivity and quality. 
Same thing with PCs in the 1980s. 
Why are so many companies mov- 
ing to Linux servers? Better price/ 
performance and reliability. All of 
these decisions were based on 
committing IT resources to produce 
real business value. The problem 
isn’t with ROI - it is that people are 


afraid to put down on paper what 

| the IT effort should produce in the 

| way of business value. Once com- 
panies understand how to show the 
real business value that can be cre- 
ated with their IT efforts, | believe 
ROlI-type factors will actually en- 
courage enterprises to make more 
commitments to IT. 

Bruce Skaistis 

President, eGlobal CIO, 

Tulsa, Okla. 


ARK HALL’S COLUMN is a 

perfect example of IT staff ar- 
rogance and just one of the reasons 
real business people have a low 
opinion of IT people. The average IT 
staffer has no idea what makes 
sense to the business organization. 
Hall proves this with his comment 
about ROI and Wang word proces- 
sors. A significant ROI was very 
easy to prove on Wang installations. 
It has always been the stance of IT 
staff that they don’t need to justify 
| their favorite projects. That's why 
the graveyard of failed projects is 
so large. 
Andrew H. Olson 
Managing director, TEAM 
International Group, Gaines- 
ville, Fla. 


Always Encrypt 


HY WASN’T THE DATA that 

was compromised at Data 
Processors International stored in 
an encrypted format [“System 








Break-in Nets Hackers 8 Million 
Credit Card Numbers,” QuickLink 
36530]? In writing databases to 
store personal information for my 
company, it never occurred to me 
to store the data in an unencrypted 
format (public key/private key). | set 
up an XML format, then encrypt it, 
then store it. If it's transmitted to a 
database server from a Web server, 
it’s encrypted before it goes to the 
database server. It's never decrypt- 
ed until it's time to view it. 

Curtis Maurand 

Network engineer, Prexar 
LLC, Portsmouth, N.H. 


Offshore Security 


$1 READ ABOUT the intent of 

many companies to engage in 
offshore outsourcing [“Companies 
Expected to Boost Offshore Out- 
sourcing,” QuickLink 36377], | have 
to ask why there isn't more solid in- 
formation being reported on the 
data security issues that could 
arise. It seems to me that offshore 
data centers might have the poten- 
tial for educating the wrong people. 
Ben McCullom 
Chestnut Ridge, N.Y. 


Firewalls and SIP 


LTHOUGH THE FEB. 3 Quick- 

Study, “Session Initiation Pro- 
tocol” [QuickLink 35318], suggest- 
ed otherwise, interoperability be- 
tween equipment is quickly and 





fairly easily corrected within the SIP 
community, so that’s not causing 


| much deployment delay. As for 
| concerns that SIP will make net- 


works more vulnerable, the source 
may be the firewall and NAT (Net- 
work Address Translator) issue. SIP 
communication doesn't traverse 
most installed firewalls and NATs. 
Several methods and equipment 
have been suggested to solve this 
problem, but the most general one 
is to eliminate the problem where it 
occurs, in the firewall itself. Fire- 
walls that include a SIP server that 


| dynamically controls the firewall 


have been available for over a year, 
and since they're no more expen- 
sive than ordinary firewalls, they 
should be considered for all new in- 


| stallations. 


Karl Erik Stahl 

President, Intertex Data AB, 
Stockholm, 
karl.stahl@intertex.se 


| COMPUTERWORLD welcomes 


comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 

E-maii: letters@computerworld.com. 
Include an address and phone num- 


| ber for immediate verification. 


More letters on these and other 
topics are on our Web site: 
computerworld.com/letters 
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OPINION 
Don’t-Ask-Don’t-Tell E-Commerce 


The recent theft of 8 million credit card 
numbers shows why credit card associa- 
tions should rethink their security policies, 
says Robert L. Mitchell. Page 33 


EMERGING TECHNOLOGIES 
Virtually Face to Face 


IP-based videoconferencing is fi- 
nally taking hold as corporations 
upgrade their WAN infrastructures 
to support IP telephony. Page 30 


Straight-through proc- 
essing means that finan- 
cial services firms must 
move to all-digital proc- 
esses to remain competi- 
tive and connected. 

By Lucas Mearian 


CAMPBELL LAIRD 


03.03.03 


oss Nets Go Regional 


may use the same spectrum as wireless 
LANs, but wide-area wireless net- 
work technologies can bridge 
Ethernet LANs in offices 
many miles apart. Page 28 


N THE NAME OF STRAIGHT-THROUGH PROCESSING 
(STP) of securities trades, financial services 
companies over the next two years will spend an 
estimated $6 billion replacing their manual 
processes by plugging into virtual trade-match- 
ing utilities (VMU), installing middleware and 
integrating front- and back-end computer systems. 

In simple terms, STP is the removal of manual 
processes in the trade-processing cycle, including pa- 
per and disparate data systems, creating an unbroken 
electronic stream of information from the broker/ 
dealer to the clearinghouse. At present, much of the 
trades process still relies on fax or telephone. 

STP includes messaging standards, translation 
middleware and electronic connectivity among in- 
vestment managers, broker/dealers, custodian banks 
and clearing companies. One confusing aspect of 
STP is its association with T+l, or trade plus one day. 
T+l refers to reducing the trade settlement cycle 
from the current standard of three days to one, and 
it’s dependent on STP’s electronic efficiencies. 

The Securities Industry Association (SIA), an in- 
dustry group with offices in New York and Washing- 
ton, has lead the charge toward STP and T+1. But the 
Sept. ll terrorist attacks and the economic downturn 
squelched the SIA’s effort to move to T+1 by 2005, as 
attention and budgets turned toward more critical 
needs such as disaster recovery, business continuity 
and regulatory compliance. The SIA stated in July 
that it will focus on promoting STP by 2004, with no 
deadline for T+1. 

The real incentive to move to STP, the SIA argues, 
is the return on investment, which could be consid- 
erable for many companies. 

For example, the Northern Trust Corp. in Chicago 
went live in August with an e-mail alert system that 
replaced a labor-intensive fax process for notifying 
investment managers of corporate actions such as 
mergers, acquisitions and name changes. The home- 
grown technology, called Corporate Action Delivery 
and Response system, took a year to develop and 
cost just under $10 million. It has reduced the num- 
ber of employees required for data input by up to 
70% and improved productivity by 50% to 60%, says 
Teresa Parker, who is responsible for securities and 
banking operations worldwide at Northern Trust. 

The Web-based e-mail system runs off a Sun So- 
laris server, while production data, including ac- 
counting programs, runs off IBM iSeries and zSeries 
mainframes. The Web-based e-mail application is a 
proprietary program based on Java. It’s used for 
sending securities-related data to fund managers, 
who are online using either the Society for World- 

Continued on page 24 
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An STP Model for Facilitating Securities Trades 


FleetBoston Financial Corp. launched one of 
the industry's first Internet links for high-value 
money-market and mutual-fund customers, cre- 
ating an electronic straight-through process 
connecting its front- and back-end systems. 

FleetBoston partnered with Bonaire Soft- 
ware Solutions LLC to develop the application, 
which lets investors order trades online and lets 
traders and salespeople view, approve or reject 
customer orders through an electronic link to a 
trade blotter. It then sends approved trades di- 
rectly to multiple record-keeping and/or proc- 
essing systems. Both FleetBoston and Bonaire 
are based in Boston. 

FleetBoston replaced a manual process, 
which required customers to call in to find out 
what their position was on any given day and 
what excess cash they had in their accounts. 

Since the Web-based portal was launched in 
February 2002, the number of money-market 
and mutual-fund accounts has tripled. Large 
volumes of trades that normally took an hour to 
process now take less than five minutes, says 
Dean Richmond, a senior systems manager at 
FleetBoston. Thirty-one percent of FleetBos- 
ton’s mutual fund and money market cus- 
tomers, or 470 users, access their accounts at 
least once per day via the system. 

Richmond said the system took about a year 
and a half to build but didn’t require replacing 
any existing systems. “It involved taking existing 
legacy systems and giving them the ability to 
talk to a Web application. We had to build a lot 
of APIs [application programming interfaces] 
and make sure that process was hardened and 
redundant,” says Richmond. The system almost 
immediately paid for itself through time savings 
and customer retention, he adds. 
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Continued from page 21 

wide Interbank Financial Telecommu- 
nications (SWIFT) industry messaging 
standard or Northern’s Web-based 
product. 

“Before, it took 10 people to process =—— 
1,000 trades a day, and now it takes four people,” 
says Parker. But there is risk involved in moving to 
an all-electronic process. “If you get a trade wrong, 
the most you’re going to pay for is the lost interest 
on the trade. If you get a corporate action wrong, 
you might have to sell a security you got by mistake. 
That could be 17 cents, or it could be millions of dol- 
lars,” she says. 

IT managers say that the benefits of STP outweigh 
the risks. A move to an all-electronic flow of infor- 
mation allows managers and broker/dealers to see a 
stock price first and react to it, which can translate 
into increased profitability and improved customer 
service, according to Larry Tabb, an analyst at Tow- 
erGroup in Needham, Mass. Electronic systems also 
require fewer salespeople, who are normally busy 
writing down orders and having staff keypunch in- 
formation into back-end systems. STP also helps re- 
move errors from orders that in a manual process 
can be entered at any point as orders move internally 
and externally from a fund manager or retail broker 
to a custodian bank and a clearinghouse. 


Integrating Internal Systems 


Because banks work with multiple brokerages to au- 
thorize the release of funds that are used to cover se- 
curities trades, the manual approval processes used 
today can take several days to clear even one trade. 

“Firms use multiple systems, and not all of them 
are linked together. The issues have to do with link- 
ing all the systems together so transactions flow 
from one to another with no one handling it. There 
are snafus everywhere along the line,” says Tabb. 

Internal message standards for cash reporting, 
bulk payments, investment funds, securities pretrade 
processes and customer-to-bank credit transfers are 
virtually nonexistent, say analysts. 

Applications and messaging systems within securi- 
ties firms and banks weren’t created with consistent 
architectures, so middleware is needed to send data 


This example shows how an STP system facilitates real-time matching of data throughout the trade life cycle. The process starts with the initial trade 
agreement between the brokci and investment manager, the subsequent settlement agreement involving the executing broker, clearing brokers and 
custodian banks; and the actual settlement with the depository. The matching utility sends pending settlement instructions to the depository, so each 
agent doesn't need to do so in a separate transaction. 
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For additional information on the 

need for messaging standards, visit: 
QuickLink 36685 
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from one message format, such as the 
Financial Information Exchange (FIX) 
protocol, to back-end systems that may 
use proprietary formats. 

Generally, high-value customers — 
those who trade more than $100,000 a 
day — call brokers or sales representatives on a trad- 
ing desk to check their account balances, stock hold- 
ings and what excess cash they might have to invest. 
Sales representatives then write up order tickets by 
hand and fax them to an operations department, 
where someone else keys in the order into back-office 
systems. Those orders then have to be reconciled be- 
tween the front and back office to make sure all the 
tickets were received without any missed trades. 


Virtual Matching Utilities 


One key issue for all companies participating in se- 
curities trading is connectivity to nascent VMUs, 
such as Boston-based Omgeo LLC and the Zurich- 
based Global Straight-Through Processing Associa- 
tion. Matching in posttrade message instructions at 
one centralized data center creates an unbroken flow 
of electronic data between financial services firms. 

Matching utilities are basically trading traffic man- 
agers. They use large servers or mainframes and com- 
mon messaging formats based on XML to allow bro- 
ker/dealers and investment managers to communi- 
cate with one another and assemble the many pieces 
of data required for a trade to be confirmed before 
being sent on for settlement by a custodian bank. 

Royal London Asset Management has been inte- 
grating back-office systems for about a year and 
plugged into Omgeo’s Central Trade Manager 
(CTM) VMU about three months ago. Before that, 
the London-based bank was taking an average of 20 
hours to get confirmation of a trade, according to Ju- 
lian Baines, Royal London’s investment servicing 
manager, who oversaw the deployment of Omgeo’s 
technology at his company. The same process now 
takes three hours, he says. 

Also, prior to using Omgeo, Royal London’s fund 
managers input data onto databases that were trans- 
ferred daily in batch mode to a back-office system, 
where the trades were physically examined by clerks 
on the company’s settlement team. Those clerks in 
turn printed an electronic confirmation and used 
that to discover exceptions or mistakes. 

“Fifty percent of those orders were failing on poor 
allocation data, poor information to brokers or vice 
versa,” says Baines, who adds that errors were virtu- 
ally eliminated with the new electronic messaging 
system. Royal London uses an application program- 
ming interface gateway device on an existing Win- 
dows NT server that translates code from its Thom- 
son Financial’s Icon investment management, valua- 
tion and accounting system into Omgeo’s CTM. 

“Because our back-end database was from Thom- 
son, they did the integration work,” Baines says. The 
connection into Omgeo’s CTM took about a year. 
The greatest hurdle, as Baines puts it, was under- 
standing “the new jargon.” Royal London has linked 
eight of its highest-volume brokerages, with four 
more in the pipeline. “That would give us 60% of our 
volume,” Baines says. “Once we hit that, we’ll be 
looking to increase it and have all 60 brokerages on 
by the end of the year.” D 
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REGIONAL 


TECHNOLOGY 


Gi 


Wide-area wireless networking 
systems can provide a cost- 
effective alternative to leased lines 
for Internet access or metro-area 
connectivity. 





HE UNLICENSED PORTION 
of the U.S. radio frequency 
spectrum represents just 
one-tenth of 1% of the total 
bandwidth allocated for 
communications, but this 
thin slice has made the cur- 
rent boom in wireless LANs 
possible. Because WLANs 
use the free spectrum, companies can 
set them up without the hassle or ex- 
pense of going through the Federal 
Communications Commission’s licens- 
ing process. 

But WLANs aren't the only network- 
ing technologies leveraging the free 
spectrum. Corporations are also using 
fixed wireless systems and services from 
wireless service providers to extend 
connectivity beyond the LAN. 

Fixed wireless systems use the same 
2.4- and 5-GHz bands used by WLAN 
products. But highly focused direction- 
al antennas support wide-area connec- 
tions over distances measured in miles, 
rather than the hundreds of feet WLAN 





devices cover. Fixed wireless devices 
let enterprises tie together regional or 
metro-area office buildings using a 
privately owned and operated broad- 
band network. The systems can sup- 
port point-to-point Ethernet bridging 
or IP-based multipoint packet routing. 
And some products also offer a sepa- 
rate Tl channel, eliminating the need 
to lease physical T] circuits for digital 
voice traffic. 

Companies that don’t want to set up 
their own systems may find similar 
wireless offerings from service pro- 
viders. A new breed of wireless Inter- 
net service providers (ISP) uses the 
unlicensed frequency band to offer 
last-mile broadband services at rates 
lower than those that telephone com- 
panies charge for comparable leased- 
line services. Service providers offer 
data rates ranging from a few hundred 
kilobits per second to 54M bit/sec. or 
more. And in some remote locations, 
as well as in parts of some metropoli- 
tan areas, wireless ISPs are the only 
broadband alternative. 


Building a Network 


York, Pa.-based Kinsley Inc. opted for a 
fixed wireless WAN that serves 1,500 
workers in multiple locations. Patrick 
Kinsley, a project co-coordinator at the 
construction and commercial property 
management firm, says the company 
had to accommodate large data files 
generated by computer-aided design 
(CAD) workstations, as well as growing 
voice traffic. It also needed a way to 
connect telephone and computer sys- 
tems in office trailers at construction 
sites into back-end systems more 
quickly than the several weeks it took 
to provision lines from the local tele- 
phone company. 

Business Information Group (BIG), 
the York-based systems integrator that 
hosts Kinsley’s data center, designed 
the fixed wireless network, which 
serves 1,500 workers in eight locations. 
Some 22 other companies housed in 
buildings Kinsley manages also pay to 
use the system. This helped shave 
Kinsley’s cost in building the network, 
says John Dolmetsch, BIG’s president 
and CIO. The wireless network con- 
sists of a high-speed backbone, with 
secondary spurs fanning out to other 
offices at speeds ranging from 284K to 
24M bit/sec. 

Kinsley routes all voice traffic from 
IP and digital phones over its wireless 
IP backbone. Digital phone signals 
are converted to IP at remote switches. 
All voice traffic terminates in IP trunk 
cards in a private branch exchange 
from Nortel Networks Ltd. The switch 
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can handle up to 336 concurrent voice- 
over-IP sessions, Dolmetsch says. 

Kinsley’s wireless network uses 
Tsunami point-to-point and point-to- 
multipoint wireless networking equip- 
ment from Proxim Inc. in Sunnyvale, 
Calif. Tsunami operates in the 5.8-GHz 
unlicensed frequency band and inter- 
connects backbone locations at speeds 
up to 24M bit/sec. The network also 
uses BreezeAccess II 2.4-GHz wireless 
equipment from Alvarion Inc. in Carls- 
bad, Calif., to provide connectivity 
with smaller locations and remote job 
sites (see diagram). 

The equipment is installed on five 
towers within a 30-mile radius around 
York, each no farther than 10 or 12 
miles from an office location, Dol- 
metsch says. Kinsley completed the 
fixed wireless backbone in 2001 and 
has continued to add office locations. 

Dolmetsch estimates the system’s 
five-year return on investment at 70% 
when calculated against the cost of the 
voice and data circuits it replaced. Sav- 
ings on phone charges alone have been 
$3,500 per month, he says. The wire- 
less equipment cost about $200,000. 

Todd Carothers, an analyst at The 
Telnecity Group LLC in San Jose, says 
the size and scope of the Kinsley wire- 
less WAN is unusual. “I’ve never heard 
of [a wireless WAN] by one company as 
extensive as this,” he says. 


The Hotel Wireless 


Rather than install a private fixed wire- 
less system, Kevin Lanigan, vice presi- 
dent and general manager of the Stan- 
ford Park Hotel in Menlo Park, Calif., 
contracted with a service provider. 
The service delivers the high data rates 
Lanigan needs to support guest Inter- 
net access and provides variable band- 
width — something he couldn’t easily 
obtain from his local phone company. 
The hotel, located in the heart of Sil- 
icon Valley, hosts large meetings for lo- 
cal high-tech companies. Those guests 
require bandwidth for meetings that it 
would typically take multiple T1 lines 
to support. Lanigan initially contacted 
the local exchange carrier, a unit of 
SBC Communications Inc. in San An- 
tonio, and was told that it would take 
60 to 90 days to install such circuits. In 
contrast, NextWeb Inc., a wireless ISP 
in Fremont, Calif., provides a basic 
1.44M bit/sec. T1 circuit from a small 
dish on the hotel’s roof, and it can 
ramp up the bandwidth to the equiva- 
lent of multiple T1 lines in one day. 
David Williams, vice president of 
business development at NextWeb, says 
his 5-GHz service supports speeds from 
IM to 10M bit/sec. Lanigan’s T1 service 





www.computerworld.com 


supports WLAN access throughout the 
163-room hotel — a service for which it 
doesn’t charge guests extra. Nonethe- 
less, Lanigan says the broadband wire- 
less installation has paid off: The hotel 
has landed “not fewer than 12 group 
bookings” in the past year because of 
its ability to offer such connectivity. 
While broadband wireless was once 
viewed as ideal for rural areas with lit- 
tle telecommunications infrastructure, 
Trent Anderson, CEO of wireless ISP 
SkyRiver Communications Inc. in San 
Diego, says that even in densely pop- 
ulated areas, there are pockets not 
served by telephone companies’ Digital 
Subscriber Lines or fiber. And if fiber 
connections are available, they are of- 
ten prohibitively expensive, he says. 
Linda Tucker, co-founder of Aerial 
Access LLC, a digital aerial photogra- 
phy firm in San Diego, fell on the other 
side of that digital divide. Aerial Access 
has a half terabyte of stored aerial pho- 


tos and often needs to send 1OMB or 
larger image files to prospective custo- 
mers. SBC could offer only fractional T1, 
at a cost of $350 per month. SkyRiver 
charges $149 per month for a 512K bit/ 
sec. connection, which Tucker says is 
adequate for her requirements. “An av- 
erage file between 3 and 1OMB transmits 
in between 30 and 60 seconds,” she says. 


Growing Pains 

Although vendors such as Proxim and 
wireless ISPs such as NextWeb and 
SkyRiver have established a fixed 
wireless beachhead, the wireless WAN 
market is still in its infancy, according 
to Wai Sing Lee, an analyst at Frost & 
Sullivan Inc. in San Antonio. 

Between 1,500 and 1,800 wireless 
ISPs operate in the unlicensed spec- 
trum band today, according to Daryl 
Schoolar, an analyst at In-Stat/MDR in 
Scottsdale, Ariz. He predicts signifi- 
cant growth over the next several 
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years. Free spectrum and low-cost 
equipment, at about $8,000 for a com- 
plete base station, will serve as the dri- 
vers for this growth, he says. 

But analysts and wireless ISPs alike 
say growth could be inhibited by inter- 
ference. The 2.4-GHz band is already 
crowded, and the same may happen in 
the 5-GHz band. NextWeb’s Williams 
says interference could be mitigated by 
using a technique called dual polariza- 
tion, whereas Carothers at Telnecity en- 
visions the wireless ISP industry devel- 
oping a self-policing interference body. 

Security is also a concern, but not 
as much with fixed wireless as with 
broadband, since fixed wireless uses a 
narrow, hard-to-intercept transmission 
beam. The Proxim gear used by Kins- 
ley adds a proprietary encryption 
scheme. Wireless ISPs like SkyRiver 
build in additional layers of security as 
well, including a Media Access Control 
layer. They also offer individual ad- 
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dresses for customer equipment. 

But even though the industry is still 
evolving, the technology is stable. Craig 
Mathias, an analyst at Farpoint Group 
in Ashland, Mass., calls fixed wireless 
relatively easy to install and operate. 

And to users, it seems like magic. Jeff 
Leaf, a project co-coordinator at Kins- 
ley-owned LSC Design Inc., notes that 
“when you tell people in York that 
you're doing business over a wireless 
network, they don’t have a clue.” When 
the network was first turned on, Leaf 
says, he marveled at the speed at which 
his CAD files were transmitted. Now he 
doesn’t think about the network or its 
speed at all — a sure sign that the tech- 
nology has gained acceptance. D 
MORE MOBILE 
For more on wireless networking, visit the Mobile & 
Wireless Knowledge Center: 

QuickLink k1000 
www.computerworld.com 
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Virtually 
Face to Face 


Outlook: As corporations upgrade 
infrastructures for IP telephony, 
integrated IP-based videoconfer- 
encing systems are starting to 
proliferate. By Robert L. Mitchell 


| 
IDEOCONFERENCING used to 
require users to adjourn to 
specially designed rooms 
filled with complex technolo- 
gy that worked over satellite, 
Integrated Services Digital Network 
(ISDN) or other private network ser- 
vices. Such systems cost upward of 
$50,000 per site. But no more. Com- 
pression technology has improved, de- 
sign upgrades have cut costs, and a 
new generation of videoconferencing 
systems designed to work over IP net- 


Video Over IP 





works as well as ISDN is gaining a 
foothold in corporations. 

“We have seen a heavy shift toward 
IP,” says Stacy Saxon, director of mar- 
keting at videoconferencing vendor 
Polycom Inc. in Pleasanton, Calif. She 
says she expects 75% of all videocon- 
ferencing systems to be IP-based with- 
in the next three years, up from just 
25% today. Giga Information Group 
Inc. in Cambridge, Mass., predicts 
18.9% annual growth in 
videoconferencing appli- 
ance sales through 2005. 

Several developments are 
driving the technology for- 
ward. IP-based systems eliminate the 
need for ISDN service, which can be 
expensive and difficult to provision 
and is unavailable in many locations. 
Unlike those based on ISDN, IP-based 
systems can be moved to any office 
with an Ethernet jack. Corporations 
are gradually replacing network infra- 


EMERGING 
TECHNOLOGIES 


www.computerworld.com 


structures with switches and routers 
that support quality-of-service stan- 
dards required for IP telephony and 
enable clear, jitter-free video services. 

“We're piggybacking on what the 
company’s doing with voice over IP,” 
says Chris Duncan, global leader for 
e-communication technology at The 
Dow Chemical Co. in Midland, Mich., 
which is equipping 500 offices world- 
wide with an IP videoconferencing 

ile system. Ethernet advances 

Or have also boosted LAN 

7 bandwidth to Gigabit 
Ethernet and 10 Gigabit 
Ethernet speeds that can 
better support video feeds. And busi- 
nesses are also extending those high- 
bandwidth connections to remote of- 
fices. “Getting fairly large bandwidth 
isn’t as big an issue as it was four or 
five years ago,” Duncan says, citing the 
current glut in long-haul fiber capacity. 

Meanwhile, bandwidth requirements 


Videoconferencing systems can be configured to run over private IP networks, eliminating the need to 
provision ISDN while allowing integration with Web conferencing and other IP-based applications. Over 
wide-area connections, a VPN is often implemented for increased security. Most systems also support 


ISDN links for background compatibility. Although a portion of the ISDN link may touch the IP network, the ISDN H.320 client protocol differs substan- 
tially from the H.323 connections of IP users and doesn’t present security issues on the IP network segment, according to Polycom. 





www.computerworld.com 
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Vendors Jump on IP Video Bandwagon 


Videoconferencing products fall into two categories: 
group/room systems, and single-user desktop systems. The 
endpoint equipment may consist of a stand-alone appliance, 
or it may connect to a PC using a Universal Serial Bus port or 


internal add-in card. 


Most corporate deployments are group systems. While ap- 
pliances are easier to use, PC-based units offer better integra- 
tion with Web conferencing features such as application shar- 
ing, says Giga analyst Elizabeth Herrell. Conferencing with : 
more than one location requires a multipoint control unit, which 
acts as a central call manager. Vendors also offer specialized 


Polycom Inc. 
Pleasanton, Calif. 
www.polycom.com 


Polycom has more than two-thirds of the 


market and a comprehensive suite 
of hardware and software offerings. 
Products include the $599 Via- 
Video PC-based single- 

user system. Pricing for 

group systems, which 

include the ViewStation 

set-top and PC-based 

iPower series, start at 

$3,999. 

—_-———____——__> 
POLYCOM’S IPOWER 9000 


are shrinking. Video encoders now 
support up to 1,000-to-1 compression, 
delivering acceptable quality in as lit- 
tle as 128K bit/sec. per connection. 
“It’s good-quality video, if you don’t 
have a lot of movement,” says Saxon, 
although Duncan says he considers 
384K bit/sec. to be the minimum for 
acceptable quality. The newest stan- 
dard, named H.264 by the Geneva- 
based International Telecommunica- 
tion Union (ITU), will soon deliver 
DVD-quality video feeds using less 
than IM bit/sec. of bandwidth. 
Videoconferencing technology is 
also starting to converge with tradi- 
tional Web conferencing systems, al- 
lowing IT to create a single interop- 
erable and centrally manageable set 
of applications that may include data 
sharing, whiteboarding and stream- 
ing media. For example, Polycom’s 
Web conferencing software, called 
WebOffice, works with its PC-based 
videoconferencing systems. And 
Web conferencing vendors are 
adding video to their services, al- 
though analysts say quality-of-ser- 
vice issues will keep most business 
videoconferencing off the Internet. 
“Enterprise users are primarily us- 
ing VPNs [virtual private networks] 
and dedicated private IP networks to 





> software that handles bandwidth management and call sched- 
: uling and enables the creation of a global address book. 

: Prices range from less than $5,000 per site for a system 

* supporting up to three callers to $15,000 or more for room 


systems with large screens. But users also need to consider 


- connections. 


Tandberg Inc. 

Reston, Va. 

www.tandbergusa.com 

Tandberg focuses on the high end, 

offering 128-bit Advanced Encryp- 

tory integration via the Lightweight 
Directory Access Protocol. Its 
integrated 2500, 7000 and 
8000 systems start at $15,990 
per site and go up to $59,990. 
The 800 and 550 series set-top 
units start at $4,990 per site. Its 
1000 series single-user desktop 
units start at $5,490. 


ensure the quality of service, which 
cannot be offered by the public In- 
ternet,” says Roopam Jain, an analyst 
at Frost & Sullivan Inc. in New York. 
And while some quality-of-service 
standards are in place today, analyst 
Lou Latham at Gartner Inc. describes 
them as “fluid and incomplete.” Net- 
work administrators still worry 
about reliability and performance, he 
says. “There’s an anxiety on the part 
of network administrators that their 
networks are going to get saturated,” 
he says, adding that the key is to keep 
traffic segregated and prioritized so 
it moves quickly. 

In addition, the ITU’s H.323 inter- 
face standard for videoconferencing 
may give way to the Internet Engi- 
neering Task Force’s evolving Session 
Initiation Protocol (SIP). That could 
ease integration problems when 
adding audio calls from voice-over-IP 
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s There’s an n anxiety 
on the part of 
network administrators 
that their networks are 
going to get saturated. 


LOU LATHAM, ANALYST, GARTNER INC. 








: the incremental cost of upgrading and managing a more com- 
> plex network infrastructure to support IP videoconferencing, 
: Herrell notes. All systems can support a mix of ISDN and IP 


While at least 10 vendors offer products in this area, three 
: players dominate, Herrell says. 


Sony Business Solutions & 
Systems Co. 

Park Ridge, N.J. 
http://bssc.sel.sony.com/ 


Professional/ 

Sony's high-performance, low-cost 
systems have sold well to small and 
midsize businesses, Herrell says. Its 
PCS-1600 series set-top units start 
at $3,394; desktop units start at 
$3,994. On the high end, a pack- 
aged system capable of supporting 
six multipoint sessions sells for 
$21,300. 


telephony systems, which use SIP or 
proprietary protocols, into a video- 
conferencing session. “That wasn’t a 
problem with ISDN,” Duncan says. 

Jain says videoconferencing also 
continues to face ease-of-use issues. 
For example, users may need to 
know the destination IP address or 
phone extension to establish a ses- 
sion. Some products allow the cre- 
ation of an address book, but most 
can’t access information already 
stored in an Active Directory or oth- 
er enterprise directory infrastructure. 

Despite its limitations, IP video- 
conferencing can pay off in organiza- 
tions that require more than 30 hours 
of videoconferencing per month, 
says Giga analyst Elizabeth Herrell. 
Gartner’s Latham is more cautious. 
“You can start by keeping your ISDN 
lines and test the IP waters, connec- 
tion by connection,” he says. He 
doesn’t expect end-to-end reliability 
to be worked out until next year. 

But Duncan says the technology 
hurdles are surmountable. “The big- 
ger challenge is getting people com- 
fortable using the technology.” D 





Russell Kay, a freelance writer in 
Worcester, Mass., contributed to this 
story. 


Videoconferencing 
Effort Goes Global 


Dow Chemical has near- 
ly completed the rollout 
of IP videoconferencing 
to 500 offices world- 
wide using Polycom 
iPower units, and it 
plans to eliminate 125 
ISDN-based systems. 
CHRIS DUNCAN, global 
leader for e-communica- 
tion technology, spoke 
with Computerworld’s Robert L. Mitchell 
about how the project is working out. 


Why did you pursue IP videoconferencing? 
One reason was the reliability of ISDN. 
Those 125 sites were in 40 countries, and 
because of the questionable reliability of 
ISDN, it was never fully accepted beyond 
an executive tool. It didn’t become part of 
the culture. We wanted to find a way to 
expand the endpoints, and video over IP 
seemed to make a lot of sense. 


What's the payback? IP is significantly 
less money[than ISDN]. If we're going 
from the States to Pacific [Rim countries, 
it costs] probably 75% less. We're using 
the same bandwidth we use for everything 
else. We've allocated certain percentages 
of our [wide-area network] bandwidth to 
video only. It’s the same pipe, but we've 
segmented the network. We have three- 
quarters of our deployment done. We’re in 
18 or 19 countries now. 


How does the quality compare with that of 
ISDN? We had been running our IDSN at 
128K bit/sec. Some of that was due to 
cost. When we decided to upgrade with 
the new iPower systems, we decided that 
we had to improve not only the reliability 
but also the picture quality. We’re running 
384K bit/sec. It’s a minimum of three 
times better. There is some jerkiness in 
384K bit/sec., but it’s not as annoying. 


Why not use audioconferencing? You real- 
ly need to have some face-to-face to read 
the body language to see what's going on. 
If we can avoid one trip per month per 
room, the entire system pays for itself. 


How are users accepting videoconferenc- 
ing? We haven’t seen a notable reduction 
[in travel] yet. The harder part is the cul- 
tural change. People are comfortable 
meeting face to face. When you put a 
monitor in between, you have to focus on 
the cultural changes. There are certain eti- 
quettes that are different. And if your call 
goes down for two minutes, you have to 
understand that the meeting still saved 
you 30 hours [of travel]. 
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Man aging collaboration can be challengi Recognize any of those issues? Or, perhaps, all of them? We thought so. 
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Many of these issues can be related to your legacy desktop software; 
fortunately, many of them can be addressed by features in Microsoft® 
Windows® XP Professional and Office XP Professional. Want specific 





examples? Windows XP Professional offers built-in audio and video-con- cycle, while automatically providing the correct tools for each reviewer 
ferencing capabilities that make the whole experience easy and intuitive and allowing changes to be easily merged back into the original document. 
for your end users. With the Send for Review feature, Office XP Professional And finally, several new features make deployment easier than ever. For 

lets users easily assign roles to everyone involved in the document review more ideas about managing your desktops, visit microsoft.com/desktop 
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Escape From SQL Hell 


Quick response to SQL Slammer deflects 
potential disaster. By Mathias Thurman 


PFRONT preparation 

helped my company 

ward off the SQL Slam- 

mer worm, which ex- 
ploits a buffer overflow vul- 
nerability in Microsoft SQL 
Server and creates a flood of 
packets, similar to a denial-of- 
service attack. But we still 
didn’t totally avoid it. 

Shortly after the worm ap- 
peared, we decided to run 
scans of our infrastructure to 
find and patch vulnerable sys- 
tems. In the interim, we imple- 
mented Cisco Systems Inc.’s 
Network-Based Application 
Recognition (NBAR) 


edge routers cont- SECURITY 
uring it to drop any MANAGER'S 
packets that matched 

JOURNAL & 


the signature of the 
SQL Slammer attack. 
The problem with 





occasional system that had 
slipped through the cracks. 

A few days after the initial 
SQL Slammer incident, I re- 
ceived a call from our net- 
work operations center re- 
porting that our servers were 
under a denial-of-service at- 
tack. We have a limited capa- 
bility to monitor bandwidth 
utilization on some edge net- 
work devices. Those utiliza- 
tion rates were extremely 
high, and network perfor- 
mance was suffering. So we 
pulled up data from our intru- 
sion-detection system sen- 
sors, examined the 
packets and discov- 
ered an excessive 
amount of file 
transfer protocol 
traffic. 

It turns out that 
our company had 


NBAR is that routers are de- just released a new software 
signed to route traffic, not in- download that was in excess 


spect packet payloads. NBAR 
consumes a considerable 
amount of router resources 
and can lead to performance 
problems, so we didn’t want to 
keep it in place any longer 
than necessary. 


Notifying Users 

Once the NBAR rules were 
set, we sent out a mass e-mail 
internally with a link to a 
Web page we had assembled. 
The page contained informa- 
tion on SQL Slammer, instruc- 
tions on determining whether 
a particular system is vulnera- 
ble and a link to the patch, 
which mitigates the vulnera- 
bility. Only after we had com- 
pleted our scans and were sat- 
isfied that our SQL servers 
and other impacted desktops 
were patched did we remove 
NBAR. 

Ultimately, we were lucky, 
but we weren’t 100% success- 
ful. A few stray servers were 
somehow infected. Even a 
week later, we still found an 





of 40MB, and the traffic was 
overloading our network. Un- 
til we could make significant 
changes in our systems, we 
decided to outsource the 
downloads by using Cam- 
bridge, Mass.-based Akamai 
Technologies Inc.’s EdgeSuite 


| service. 


The implementation went 
without a hitch. With a few 
modifications in our server 
configurations and some redi- 


The problem 
with NBAR is 
that routers are 
designed to route 
traffic, not inspect 
packet payloads, 
and it consumes 
a considerable 
amount of router 
resources. 
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rection, we were ready to go. 
Eventually, we will either 
upgrade our network to han- 
dle the load, outsource to a 
managed service provider or 
possibly stick with Akamai. 


EDirectory Assistance 
With that incident out of the 
way, I’ve begun searching for 
an easily implemented, inex- 
pensive method of providing 
centralized access control for 
our Sun Solaris servers. 
In the past, most Unix ad- 

ministrators just used the 


| Unix Network Information 


Service (NIS). Because of 
some vulnerabilities in NIS, 
however, we shied away from 
that and focused on tools that 
would integrate with our Nov- 
ell eDirectory service. We use 
eDirectory for all of our enter- 
prise accounts and as a user- 
information repository for 
controlling access to People- 
Soft, Siebel and other applica- 
tions. The new system must 
allow central control of user- 
name, password and home- 
directory information through 
eDirectory and must let the 
administrator dictate the log- 
in shell for each user. 

We use RSA Security Inc.’s 
SecurID tokens for two-factor 
authentication, so the log-in 
shell will be the program that 
activates the SecurID soft- 
ware. After some research and 
phone calls, we decided to im- 
plement a Unix pluggable au- 
thentication module (PAM). 
Several PAMs are available, 
depending on what you want 
to integrate. We wanted cre- 
dentials stored in an LDAP- 
compliant database, so we 
used the PAM_LDAP pro- 
gram. For this to work, we 
needed both the PAM libraries 
and the LDAP client installed 
on our Solaris servers. 

Unfortunately, we couldn’t 
get the native Solaris LDAP 
client to work with PAM and 
properly authenticate to our 
Novell eDirectory. Instead, we 
had to use a third-party LDAP 
integration tool developed by 
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| Melbourne, Australia-based 
PADL Software Pty. The PADL 
libraries let us successfully 
direct the authentication re- 
quests to eDirectory. We have 
conducted some preliminary 
testing, and almost everything 
seems to work as advertised. 

One issue that we’re still 
trying to resolve, however, is 
establishing encryption be- 
tween the Solaris resource and 
the eDirectory server. We ini- 
tially thought that we could 
implement Secure Sockets 
Layer encryption for this, but 
it had problems. We’re now 
experimenting with the IPsec 
protocol, but that will require 
additional configuration on 
each Unix resource we want 
to protect. 


Adding Features 


The other issue we face is 
support for additional fea- 
tures outside of the authenti- 
cation portion of the deploy- 
ment. For example, we might 
eventually want to enable 
netgroups (which group to- 
gether machines and users 
with identical resource ac- 
cess rights for easier adminis- 
tration) and Role-Based Ac- 
cess Control. 

When using PAM and the 
PADL libraries with Solaris 2.8 
and eDirectory, we can’t con- 
figure these additional fea- 
tures. However, we know 
through our testing of Solaris 
9 and Netscape’s iPlanet 
LDAP server that this func- 
tionality is available. So in the- 
ory, it should work with the 
LDAP-based Novell eDirecto- 
ry. Perhaps I’ll have the an- 
swer by next time. D 


WHAT DO YOU THINK? = 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 


on top of that. But a new ver- 
sion incorporates client soft- 
ware and LEAP support in one 
‘package. Pricing starts at 
$39.99 per workstation. 

- Mathias Thurman 


Certification for 
Security Managers 


The Information Systems Au- 





To find a complete archive of our 
Security Manager's Journals, go online to 
| € computerworld.com/secjournal 
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Are you wrestling with storage and data management in today's 
challenging business climate? Is your infrastructure under increased 
pressure? Are business continuity worries keeping you up at night? 
Then attend Storage Networking World (SNW), the only conference 


See and Hear Regis McKenna 


Regis McKenna 

Renowned Technology Advisor, 

Venture Capitalist and Author 

New Technologies and Industry Standards: 
Separating Hype from Reality 


Find Out How CiOs Are Coping 
Ulrich Seif 
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National Semiconductor 


See the World’s Foremost Storage 
Interoperability & Solutions Demo! 


“Uniting the World of Storage” 


Do you have the cost-effective infrastructure to support 
your disaster recovery strategy? Still struggling with 
interoperability when everyone else has moved on? 
Wonder if SNIA technology specifications really make a 
difference? Need to manage more storage with the 
same fixed resources? Ready for iSCSI? If you 
answered yes to any of these questions, then you need 
to see the SNW Interoperability and Solutions Demo! 


In “The Demo”, you'll see over 50 SNIA member 
companies demonstrate the spectrum of solutions. You'll meet the experts, get 
your answers, and see the true value of SNIA technology specifications that 
reduce risks, increase interoperability, and provide common foundations to 
enable vendor choice. And you'll see the latest products with increased storage 
per square foot, new tools to automate management and to span more vendors, 
plus you'll see iSCSI in action. 


Register today to attend the | wo 
premier event on: 


Storage Management 
Enterprise Infrastructure 
Business Continuity 
Data Management and 


Emerging Technologies 


where IT Managers and professionals get an SNIA-endorsed 
education, a hand's on view of the world’s only SNIA-sanctioned 


Interoperability and Solutions Demo, and access to legions of peers, 


experts and solutions you won't find anywhere else. 


Hear Real-World User 
implementation 
Case Studies 


At Storage Networking World, you'll 

see IT managers and professionals 

describe how they implemented key 

storage technologies in today’s 

world. You'll learn from their valuable lessons and have an 
opportunity to network with them. 


Get an SNIA-Endorsed mene 


© A Primer delivering basic storage 
concepts, terminology and busi- 
ness applications. 


¢ Exclusive SNIA-produced and 
Delivered Tutorial Sessions, offer- 
ing immediately implementable 
tips, tools and techniques that cover: 
¢ Voice of the User and Virtualization 
¢ Disaster Recovery, Backup/Restore and High 
Availability Solutions 
¢ Securing and Managing Your Storage Networks 
* Focus on Networking Your Storage 
© Focus on Storage 


See the World’s Largest Storage 
Industry Expo 


You'll participate in live demonstra- 
tions and meet exhibiting compa- 
nies specializing in the latest data 
management and storage network- 
ing products and services. 


For more information and to register, 
visit WWW.SnNWuSa. com/expo or call 1-800-883-9090 


(1-508-820-8159) 
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Agenda Snapshot* For details, updates, and to register visit www.snwusa.com/expo 


Monday, April 14 


(Pre-Conference Activity and Tutorial Sessions) 


9:30am-11:00am Primer 

12:00pm-5:00pm Golf Outing 

1:00pm-2:00pm SNIA Tutorial Sessions 

choose from five different sessions 
Break 

SNIA Tutorial Sessions 

choose from five different sessions 
Break 

SNIA Tutorial Sessions - 

choose from five different sessions 
Break 
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choose from five different sessions 
Pre Conference Networking R 


2:00pm-2:10pm 
2:10pm-3:10pm 
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4:30pm-5:30pm 


7:00pm-9:00pm 


Register Today! 


Options for IT End-Users* 
General C 


4-day 


Options for IT 
| 4-day Package (Apr. 14, 1 


Submit your nomination today at 


or email Nanette Jurgelewicz at 
nanette_jurgelewicz® computerworld.com } 


Tuesday, April 15 

(General Conference - Day One) 

7:15am-8:15am —_ Continental Breakfast 
8:30am-9:15am Opening Keynote: Regis McKenna 
9:15am-12:00pm General Sessions 
12:15pm-1:30pm Networking Luncheon 
1:45pm-4:00pm General Sessions 
4:00pm-5:30pm_ Technical, Technical/Business and 
Business Tracks 

Expo, Buffet Dinner, Interoperability 
and Solutions Demo 


Wednesday, April 16 
(General Conference - Day Two) 


7:15am-8:15am — Continental Breakfast 
8:30am-9:05am Opening Keynote: David Chamberlain 
9:15am-12:00pm General Sessions 


5:30pm-8:30pm 


Pre-Registration (thr 


Travel and 
Accommodations 


IDG 


shop for 


IDG Travel is the official 
travel company for 
Storage Networking 

are your one 


aC 


To reserve your accommodations: 
visit www.etcentral.com OR 
all 1-800-340-2262 (or 1-508-820-8159) 
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General Sessions 

Break 

Technical, Technical/Business and 
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Expo Open 

Gala Evening 


1:45pm-3:50pm 
3:50pm-4:00pm 
4:00pm-5:00pm 


5:15pm-7:15pm 
7:30pm-9:00pm 


Thursday, April 17 
(Tutorial and Workshop Sessions) 


7:30am-8:30am 
8:30am-11:45am 


Continental Breakfast 
Technical, Technical/Business and 
Business Tracks 


11:45am Conference Concludes 


On-Site Registration 


Pre-Conference 
Golf Outing 
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Application for Conference Registration 


TO REGISTER: 


¢ Fax this form to 508-626-8524 
¢ Or register online at www.snwusa.com/expo 
¢ You will receive a confirmation via email 


Options for IT End-Users* 


Pre-Registration 
(through Apri Tt 


General seis Package (Apr. 15, 16) 


Total 4-day Package (Apr. 14, 15, 16, 17) 


Includes General Conference Package 


Options for IT Vendors** 


Total 4-day Package (Apr. 14, 15, 16, 17) 


tos 
le tc 


Non-Sponsoring/ Exhibiting Vendor Package 


* IT End-Users are defined as those who at 
sponsors and exhibitors. As such 
their organization are excluded from t 


* Vendors are encouraged t 
equity analysts, and other 


Technical and B 


s; SNIA-pr 


tending Storage Networking World with an intent (and an IT spending budget) to potentially buy/purchase hardware/software; 
representatives/business development from any company, analyst 
“IT End-User” designation. Enforcement of this interpretation and policy is at the 


articipate at Storage Networking World through sponsorship. (Details are available by c 
end-user” professionals as defined by Computerworld), may apply for registration al 


Q $1,490 


Q $1,490 


sultants: and Ste 


Q $5,000 


QUESTIONS? 
Call: our Customer Service Line at 800-883-9090 
© Email: snwreg@computerworld.com 


CODE: EXPO 


On-Site Registration 
after April Tith 


Q) $1,245 


Q $5,000 


‘services/etc. from our co n 
ists, and anyone else attending who does not have IT purchasing influence within 


ture capil 
le discretion of Computerworld. Questions? Please call 1-800-883-9090. 


iarris at 1-508-820-8667.) Alternatively, vendors (as well as venture 


registration is at the sole discretion of Computerworld. You will also be required to adhere to our non-solicitation policy posted on-site. 


Registration Information: (This section must be completed in order to process your application) 


First Name: 
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City: 
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Fax Number: 
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most closely matches your 
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Employees in your entire 
Company: 
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Estimated annual revenue 
of your entire company: 
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nnual company IT budget 
AIT products and services): 
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SECTION B - FOR IT VENDORS ONLY 
Your Job Title/Function: 


CEO/COO/Chairman/Pr 


Your Business/Industry: 
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CFO/Controller, 
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Sales/Market 


Annual company IT budget 
(Storage products and services): 
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Your personal IT spending 
authority (All IT products 


Less than $500,000 


Your personal IT spending 
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Treasurer 
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Movex Gets XML 


Intentia International AB, a cus- 
tomer relationship management 
and enterprise resource planning 
application vendor in Sweden, is 
adding XML Web services tech- 
nology to its Movex flagship suite. 
The Movex Web Services Frame- 
work will include a tool kit and 
runtime server. The product will 
ship in April. 


Expand Networks 
Boosts Accelerator 


Expand Networks Inc. in Rose- 
land, N.J., has added a new 
feature to its Accelerator traffic- 
compression appliance that im- 
proves the performance of voice 
over IP on low-bandwidth data 
links up to 128K bit/sec. Expand 
offers a free upgrade to current 
customers with service contracts. 


NetiQ Updates SQL 
Management Suite 


NetiQ Corp. has released Version 
2.0 of its year-old SQL Manage- 
ment Suite, with new features in- 
cluding a revamped user interface 
in one module and additional re- 
porting tools in another. The San 
Jose vendor’s offering is intended 
to ease administration of Micro- 
soft Corp. SQL Server production 
systems by providing configura- 
tion management, diagnostic and 
recovery functions. Pricing for 
the full suite starts at $15,000 for 
a five-server starter pack. 


ERoom Offering 
Gets Addition 


Enterprise content management 
software vendor Documentum 
Inc. announced its first integrated 
product offering resulting from its 
acquisition of collaboration tech- 
nology provider eRoom Technolo- 
gy Inc. last year. ERoom Enter- 
prise lets corporate workers col- 
laboratively create, share, man- 
age, reuse and archive content, 
according to officials at the 
Pleasanton, Calif., firm. Upgrade 
pricing starts at $25 per seat. 





ROBERT L. MITCHELL 


Don’t-Ask-Don t-lell 
E-Commerce 


HEN IT COMES to IT security, good 
technology can’t protect an organi- | 
zation against bad policy. Judging 


from the way the banking industry 


handled the recent theft of more 


than 8 million credit card 
account numbers [Quick- 
Link 36530], that’s a lesson 
that major U.S. credit card 
associations and issuers 
have yet to learn. 

The situation is unlikely 
to improve in the near term 
because the financial ser- 
vices firms that control 
most credit cards see little 
economic incentive to 
change their ways. Those 
most at risk of incurring 
losses include consumers 
(through identity theft), and mer- 
chants that accept “card-not-present” 
transactions. 

The card associations’ policies, as 
demonstrated, could be described 
thusly: Don’t publicize credit card 
thefts in any way; don’t require card 
issuers to notify affected card owners 
unless they ask; don’t share the list of 
compromised account numbers with 
merchants; and don’t require banks to 
reissue stolen cards. And don’t worry 
— banks will monitor accounts for 
“unusual activity” with automated, 
high-tech monitoring tools. 

Card-not-present transactions aren’t 
protected by the same zero-liability 
policy given to consumers and mer- 
chants at brick-and-mortar stores, 
where clerks can physically check the 
credit card and obtain a signature. 
This puts online vendors at a competi- 
tive disadvantage. 

Meanwhile, credit card fraud is in- 
creasing. In early February, the largest 
electronic break-in to date took place 
at credit card processor Data Proces- 
sors International (DPI) in Omaha. 





Some 8 million Visa, 
MasterCard and other 
accounts were affected. 
Yet customers wouldn’t 
have known about the 
breach until their state- 
ments started arriving if it 
hadn’t been for Citizens 
Bank, which decided to re- 
call 8,800 affected cards. 
If accounts are used 
fradulently, how much 
damage will online mer- 
chants suffer before the 
monitoring systems catch 
on and defuse the situation? Probably 
nothing will happen. But merchants 
won’t know for sure until cardholders 
receive their statements. 
What’s worse, this cloak of secrecy 


| could ultimately erode cardholder 


confidence and trust. For example, the 
story of the DPI incident surfaced in 
the press on Feb. 17. DPI acknowledged 
the incident on the 20th. A spokes- 
person declined to say when the 
break-in occurred, but unofficial re- 
ports put it early in the month — per- 
haps as early as Feb. 3 or 4. Visa said it 
“immediately notified all affected 


card-issuing financial institutions.” Yet | 
| one bank manager I spoke with said 


she couldn’t confirm whether specific 
cards were on the list until Feb. 19. Her 
bank didn’t start receiving the com- 
promised account numbers until Feb. 


17 and received the last batch two days | 


later. Was this case the exception? 
To their credit, some card issuers 
are moving to protect online transac- 
tions with new authentication pro- 
grams. For example, MasterCard 


| SecureCode and Verified by Visa re- 


quire the buyer to use a password be- 
fore making a purchase. Merchants 
who obtain passwords from buyers are 
protected from chargebacks. But most 
buyers don’t have one yet. MasterCard 


| and others should follow Visa’s lead 


and protect e-commerce providers 
that request passwords from buyers. 

This shifts the cost of stolen data 
away from merchants but doesn’t 
solve the problem. Credit card compa- 
nies should also question whether 
having dozens of processing compa- 
nies handling customer data makes 
sense in a Web-connected world. Or 
whether security measures that ad- 
dress the way card transaction proces- 
sors, issuers and merchants handle 
and protect account data should be 
more strictly dictated and policed. Or 
whether it makes better business 
sense to assume a policy of more open 
disclosure with cardholders. 

In a world where credit card num- 
bers can be used for fraud or identity 
theft, organizations have a moral 
obligation to disclose such compro- 
| mises to cardholders and merchants 
as soon as a security hole is closed. 

The industry worries about the 
expense of reissuing cards. Yet banks 
have spent a lifetime building trust, 
| and serious erosion of consumer 
confidence could cost far more than 
simply replacing those cards. It could 
cost billions in lost sales to e-com- 
merce merchants that are dependent 
on credit card payment systems. 

The current policies are bad for 
e-commerce, bad for consumers and, 
ultimately, bad for business. The in- 
|; dustry should make changes now, 
before consumers finally wake up to 
what’s going on and legislators step 
into the breach. B 





GET THE FACTS 


Read vendor statements, proposed legislation and related 
research and discussion on the issues on our Web site 
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Prepare for the New Computing Landscape ** 


In a-time of economic uncertainty..a sense of caution-has surfaced in the IT and 
telecom industries. IT buyers are spending less. hardware is becoming more 
commoditized. software is in a comiplexity crisis. and Services contracts are 
decreasing in size. At the same time. the industry is seeing some positive signs 
ncluding more demand to support mobility and an increase in broadband 


ss to. the Internet 





Join IDC’s leading: anatysts at Directions 2003.and receive-market intelligence 
and adyice-for helping you navigate the new-computing landscape. You'll 
receive answers to questions such as 

* ‘How are. the current macroeconomic factors and geopolitical conditions 


mpacting LT deployment and technology adoption? 
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hatdware. Software. and communications? 
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SPECIAL OFFER! 


Register by February 25 and 
receive a $200 discount off 
ithe conference fee. 


Register Online Now 
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(978.597.0133 outside the US) 
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A Setup for a 
Security Nightmare 
Author Notra Trulock details the appalling 
state of computer security at the Department 
of Energy during one of the most infamous 
espionage scandals in recent decades, and what 
the corporate world can learn from it. Page 40 


ROI: Whose Job 

Is It, Anyway? 

Columnist John Berry asks, “Why 
can’t IT evolve into a value-added 
business partner that could help 
business units with economic 
value management tasks?” Page 41 
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QUOTE OF THE WEEK 


é The difference between 
portals which succeed and 

those that don’t is clearly the 

amount of business involvement.” 

- Bob Rugare, portal consultant, 

Cap Gemini Ernst & Young 





Here are 10 ways to assess the 
financial health of your IT vendors. 
By Kathleen Melymuka 





CHOOSING A STRATEGIC VENDOR is a 
long-term commitment that involves a 
lot more than technology. Before you 
tie your company’s fortunes to those of 
a supplier, you’d better dig deep into 
your would-be partner’s financial 
health. Here are 10 questions that ven- 


dor-management veterans say can help | 


you decide whether your intended is 
really the one for you. 


What’s new about the company? Even 
if you think you know all about a 
technology vendor, check again. 
Today’s Wall Street darling could 
be tomorrow’s Enron. Tap a variety of 
sources for your intelligence, from 
Dun & Bradstreet Inc. (D&B) to your 
industry peers. “You may find that this 
new company that seems really hot 
used to be this old company that was 
really outdated,” says Pamela Holling- 
ton, a director at Rebound Consulting 
Ltd. in North Vancouver, British Co- 
lumbia. Beware of companies that 
change their names to distance them- 


2 
selves from poor financial performance. 


ANDREW SKWISH 





How does it conduct business and 
with whom? Some IT vendors 
have reputations as being un- 
ethical; others are just difficult 
to do business with. Either way, it pays 
to find out. “I can’t believe how many 
clients actually don’t check references,” 
says Eileen M. Birge, an analyst special- 
izing in vendor relationships at The 
Concours Group in Kingwood, Texas. 
“It sounds so basic, but they say, “We 
were in a hurry,’ or, ‘It was really close to 
the end of the quarter, and they offered 
a great deal if we signed right then.’” 
Go beyond references. Check the 
vendor’s ethics with various sources, 
including customers, says Pat Fausett, 
a strategic alliances manager for soft- 
ware and intellectual property at Agi- 
lent Technologies Inc. in Santa Clara, 
Calif. Many vendors list customers on 
their Web sites, and you can also ask 
among your peers. Then call the cus- 
tomers’ accounting departments and 
ask what it’s like to work with that ven- 
dor. Is billing timely and accurate? Are 
hidden “gotchas” in contracts costing 
extra? Is the vendor flexible about li- 
cense transfers in the case of a spin- 
off? Does it work with the customer on 
creative ways to meet peak demands? 


How has the vendor’s executive 
team performed? Look at the 
backgrounds of the officers, 
especially the chief financial 
officer, says Fausett. “See where 
they’ve been, what they’ve done or 
haven’t done,” she says. For example, 
does the CFO have a track record in 
other successful companies, or is he 
learning on the job? Did he leave a for- 
mer company under unusual circum- 
stances? Has his name been linked to 
bankruptcies or Securities and Ex- 
change Commission investigations? 

If his last company is unknown to 
you, run the company name through a 
search engine and see what comes up. 
If an officer has jumped from company 
to company, that’s also a red flag. 
“Look at where they were jumping 
from and to,” Fausett says. “Think 
about what caused that.” 
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What is the vendor’s market posi- 

tion? If you’re taking a risk on 

a new technology, be sure 

you've got a market leader, 
says Birge. “Unless they’re a leader, 
you don’t want to be out there on the 
edge with them.” To get a quick read 
on the vendor’s market position, check 
Web sites such as Hoovers.com and 
The Motley Fool (www.fool.com). But 
beware of a market leader with no fol- 
lowers, says Greg Schueman, vice pres- 
ident and chief technology officer at 
Mercury Insurance Group in Brea, 
Calif. That can indicate an insufficient 
market for the product. “You want to 
see several strong competitors,” he 
says. “You have to look at the viability 
of that particular market segment, not 
just the company.” 


What is the vendor’s financial posi- | 


tion? For public companies, use 

resources such as the vendor's 

Web site (see box) and D&B to 
check financials and earnings state- 
ments. “Go to Hoover’s and pull some 
data there,” says Schueman. “You can 
just pay for what you need. Look at 
what’s happening with their business 
model. What kind of customers are 
coming on board? Who are their com- 
petitors? Look for a company that is 
profitable and becoming increasingly 
so. You don’t want to see that they’re 
gaining market share by burning cash.” 

A 10-K report, which publicly traded 
companies must prepare annually for 
the SEC, is a “gold mine,” Fausett says. 
It includes information such as finan- 
cial statements and supplementary 
data; analysis of the company’s finan- 
cial condition; quantitative and quali- 
tative disclosures about market risk; 
information on legal proceedings, di- 
rectors and officers; and additional re- 
sources. In many cases, the 10-K is 
available on the vendor’s Web site. 

For a privately held vendor, ask the 
owner for permission to talk with the 
bank that represents the company. The 
bank probably won’t give you num- 
bers, Fausett says, but it will give an in- 
dication of the vendor’s debt ratio and 
the outlook for its financial health. 


What is the vendor’s ability to as- 
sume financial risk? A vendor 
can promise you anything, but 
can it deliver? If it goes belly 
up, it may not have the financial re- 
sources to refund your losses, regard- 
less of good intentions and contract as- 
surances. “You have to be sure in the 
event they fail that they can keep you 
whole,” Birge says. One company she 
worked with was dealing with a start- 
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up application service provider. The 
customer required the vendor to sup- 
ply financial statements every month, 
including certification that it had six 
months’ worth of working capital on 
hand. The contract stipulated that if 
the capital ever dipped below six 
months’ worth, the customer had the 
right to pull out of the agreement and 
bring the applications back in-house 
over several months. 


Does the vendor have pending or 
past lawsuits? “Most salespeople 


won't say, ‘By the way, we’re be- | 


ing sued,’ ” Fausett notes, but 
financial statements will include a sec- 
tion on litigation judgments against the 
company. Check its Form 10-K and ask 
your legal department to do a search 
for past litigation against the vendor. 
“Learn who has been suing the compa- 
ny and why,” Fausett says. Also check 
whether it has settled out of court or 


gone to trial. “That gives me a flavor for 


how they deal with adversity,” she says. 


Is there an acquisition on the hori- 

zon? You sign a contact with a 

vendor you really want to 

work with, and two weeks lat- 
er, the vendor is acquired. “There is so 
much consolidation in the industry 
that this comes up often,” says Holling- 
ton. The product you're about to buy 
may be important to the vendor, but 
the company buying the vendor may 
not be interested in supporting it. 

Schueman learned this the hard way 
once when a software vendor he was 
dealing with went bankrupt. The com- 
pany’s assets were acquired by another 
company, and the new owner de- 
emphasized the product. “The lesson 
for me was that you have to look ex- 
tremely carefully at the likelihood that 
a product will get the investment it 
needs to push forward,” he says. 

If the company is public, you should 
be able to sniff out an impending ac- 
quisition. Also, ask specifically in the 
request for proposals about future or- 
ganizational plans and the long-term 
strategy for the product. 

Once you have gathered your intelli- 
gence, make sure your investigations are 
ongoing. “For a strategic supplier, looking 
at those things is not a one-time event,” 
says Larry Graham, vice president of 
IT vendor management at San Mateo, 
Calif.-based Inovant, a wholly owned 
transaction-processing subsidiary of 
Visa International Inc. 

John Moon, CIO at Baxter Interna- 
tional Inc. in Deerfield, Ill., agrees. A 
while ago, his company was doing 
business with an Internet service 





provider that was experiencing finan- 
cial difficulties. The vendor repeatedly 
assured Moon that it was able to meet 
its commitments and was in serious 
discussions with a number of compa- 
nies about a potential acquisition. 
Then one day, it laid off virtually its 
entire workforce without warning. 
Moon got the news from laid-off em- 
ployees. “We trusted those folks be- 
cause they had been straight with us,” 
he says. “We didn’t verify as much as 
we should have.” 

Now Moon monitors his top 30 IT 
vendors as he would the competition 
or a potential acquisition to see how 
well they’re executing against their 
business plans. He watches their finan- 
cial performance on a quarterly basis 
and looks at their balance sheets to see 
whether they are consuming cash and 
will need to borrow money and how 
that will affect products and services. 
“Now we use the old Ronald Reagan 
approach,” he says. “Trust but verify.” 

Continual questioning will help you 
to detect impending changes that may 
affect your business and to anticipate 
problems early so you can manage them. 


Who is your real partner? If your 

intended partner is really the 

local value-added reseller 

(VAR) of the big vendor’s 
products rather than the big vendor 
itself, that’s who you need to know 
about. “Finding out [that] Great Plains is 
a stable Microsoft company is interest- 
ing,” Hollington says. “But it’s more in- 
teresting to know the VAR [I deal 
with] in Vancouver is about to be sold 
to someone else.” 


Is the vendor committed to the 


technology? Are you buy- 

ing at the end of a product 

cycle? Is the vendor more 
interested in developing the next big 
thing than supporting what you’re buy- 
ing? “Look at the expected life of the 
technology offered and the vendor’s 
commitment to that technology,” Birge 
advises. What are the vendor’s research 
and development expenditures in the 
area you're interested in? she asks. 
How innovative has it been in your in- 
dustry or field? You can get R&D num- 
bers from the vendor’s 10-K, but don’t 
neglect your own internal intelligence. 
If you’ve worked with the vendor be- 
fore, has it brought innovative ideas 
and interesting thinking that made you 
sit up and take notice? D 
Melymuka is a Computerworld 
contributing writer. Contact her at 
kmelymuka@earthlink.net. 
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ANOREW SKWISH 


lt Doesn't Take 
Sherlock Holmes 


Much of the intelligence you need about a 
prospective vendor partner may be just 
aclick away. To see how much informa- 
tion we could get on a prospective vendor 
just from its own Web site, we picked 
Symantec Corp. in Cupertino, Calif., 
at random. This is what we found: 


CORPORATE INFORMATION PAGE 


@ 2003 quarterly financial results 
* ry ste 
financial documents 


= Ability to drill down to: 


@ Financial news releases 

8 Details about recent alliances 

e Annual reports since 1996 
(including 10-Ks) 

w Other SEC filings 


INVESTOR RESOURCES PAGE 
= Summary of recent quarterly 
financial results 
= Presentation for investors 


= List of research analysts who 
report on Symantec 
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THE NEW IBM @ server iSeries” 


Can grant on/off added capacity. On demand. 


Operates easily with Windows; Linux® and OS/4.00° 
Copper-based. Simple and powerful. 
Easy to use, with self-healing, self-managing capabilities. 
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How to build and 
maintain portals 
that users will 
really use. By 
Connie Winkler 


z 


= 


=I 


OMPANIES typically plan 

and deploy software por- 

tals to provide employ- 

ees, customers and sup- 

pliers with a single, Web- 
based access point for data, content 
and both new and legacy applications 
across the enterprise. 

But things don’t always go as 
planned. Too often, companies build 
portals, but users just don’t come. 

“So many firms with less-than- 
hoped-for portal results repeat that 
story that it has almost become a 
cliché in the industry,” says Nathaniel 
Palmer, an analyst at The Delphi 


Group in Boston. In a December Del- 
phi survey of 500 companies spanning 
20 industries, 37% of the companies 
that had installed portals said they 


| were disappointed by the lack of “ade- 


quate interest among target users.” 
According to Delphi's findings, the 


| reason people aren't using portals is 
| because there isn’t a strategy or life 
| cycle for keeping people involved — 


what Delphi calls change management, 
explains Palmer. “There’s a lack of 
strategy beyond the technical architec- 


| ture,” he says. 


Indeed, too many companies got 
caught up in the techie hoopla sur- 
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rounding portal technology, focusing 
mostly on implementation and inte- 
gration issues, according to Delphi's 
analysis of its survey findings. Mean- 
while, critical usability issues, such as 
educating users about the portal’s ca- 
pabilities, training them to use it effi- 
ciently and marketing the value of us- 
ing the portal, haven't received the 
necessary attention. 

“It seems obvious, but time after 
time, I have seen the enterprise value 
proposition for a portal be that it’s go- 
ing to save everyone in the company 
20 minutes a day,” says Bill Ives, a 
partner at Accenture Ltd. in Boston. 
“That’s a little fuzzy,” he says. “What 
are they supposed to do with that 
20 minutes?” 


Start at the Top 


Another problem many companies 
have is failing to involve top manage- 
ment from the very beginning of a por- 
tal project. It’s critical to pay attention 
to the requirements of top managers 
because they are often the busiest of 
potential users, and they’re frequently 
on the road or located remotely, mak- 
ing them among the hardest to bring 
to the portal. 

“Bringing the portal to them through 
off-line access and proactive notifica- 
tion is one of the best opportunities 
for successful portais,” notes Palmer. 

Experts estimate that project portal 
teams need to devote 30% to 40% of 
their time gathering business require- 
ments and getting top managers in- 

volved from the start. “The 
difference between portals 


which succeed and those | 


that don’t is clearly the 
amount of business 
involvement the portal 
project receives and 
the level of integration 
with the business,” says 
Bob Rugare, a portal con- 
sultant at Cap Gemini Ernst 
& Young in Atlanta. 

Portal project teams should be al- 
ways looking to add value to the busi- 
ness, Rugare says. That often begins 
with addressing a very specific busi- 
ness problem. 

At Du Pont Co.’s $3.8 billion Perfor- 
mance Coatings group, the issue was 
content management. 

“We have a very large number of 
documents for marketing: brochures, 
press releases, warranty information 
on products and general support 
content for our distributors and [car 
repair] body shops,” explains Cather- 
ine Marchand, the group’s e-business 
strategy manager. “Our salesmen were 





| driving around with 50 pounds of ob- 


solete literature in their trunk.” 

Du Pont opted to deliver the infor- 
mation through a Web-based portal, 
using technology from Bowstreet, a 
portal software and Web development 
tools company in Tewksbury, Mass. 
Du Pont wanted the ability to cus- 
tomize information about its half- 
dozen coating brands. It also wanted 
each of its 2,500 distributors and repair 
shops worldwide to see the relevant 
customized brand information dis- 
played in almost 4,000 different site 
views, which the technology would 
allow it to do. 


Beyond Custom Content 


Few disagree with the content manage- 
ment value of portals. “The two go 


| hand in hand,” says Ives, who tells of 


call center staffers all working off the 
same page when wireless call plan in- 
formation is consolidated in a portal. 

“Commonality of content both in- 
creases business efficiency, because 
it’s cheaper to do it once, and increases 
the effectiveness of the information, 
because it’s consistent across multiple 
channels.” 

Since the content capability was ini- 
tiated, Du Pont’s site has grown rapid- 
ly. The body shops can now get train- 
ing, benchmarking tools and car paint 
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Southwire was trying to be 
ahead of the game — at the 


urging of our CEO. With all this 
Internet hoopla, the thinking 
was that surely there was some- 
thing we could do with it. 

SHEILA SIMPSON, WEB DEVELOPMENT MANAGER, SOUTHWIRE 
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color formulas via the portal. There’s 


also a job-posting and résumé service, 


Marchand says. And for the distribu- 
tors, Du Pont is researching adding 
order-tracking and order-accuracy 
capabilities. 

Portal project teams must think long 
term, advises Ben Gaucherin, chief 
technology officer at Sapient Corp., 

a technology consulting company in 
Cambridge, Mass. 

“Have a clear vision and commit- 

ment to the long-term picture. ... Ask 


| what [the portal] is going to do for 


your business in the long run,” Gauch- 
erin says. “Over and over I’ve had con- 
versations with clients who are about 
to buy an expensive piece of software, 
and it looks very much like a short- 
term value.” 

It’s also important to think enter- 
prisewide, not merely department by 


department. “The easy departments to 
pick off for portal projects are those 
that stand alone,” says Rugare. A hu- 


| man resources portal, for example, 

| may enable employees to enter their 

| own address changes into the HR sys- 
| tem and thus eliminate phone calls to 


HR staffers. But that doesn’t solve the 
problem of updating all corporate sys- 


| tems with the change. 


“Clearly, if you can implement a 


| portal that’s integrated to your supply 


chain, your suppliers and partners or 
distributors, or to your customers, the 
value goes up almost geometrically,” 


| he says. D 





Winkler writes about the management 
of technology from Seattle and is Com- 


| puterworld’s former New York bureau 
| chief. Contact her at winklerconnie@ 
| yahoo.com. 


Finding the Real Need: Productivity 


Southwire Co., a $1.7 billion, Carroliton, 


Ga.-based manufacturer of cable and 
wire, didn’t set out in 1999 to build an 
ideal portal. The privately held firm just 
wanted a spot on the Web where cus- 
tomers could place orders. It also want- 
ed to clean up multiple internal and cor- 
porate Web sites, which had been set 
up by IT on behalf of various depart- 
ments, each using different Web devel- 
opment software. 


But four years later, Southwire’s portal 


is yielding impressive business results. 


Customer orders are up 33%, and 25% 


of all orders are electronic, with online 


customers ordering twice as many items 


as those who place orders via fax, tele- 
phone or electronic data interchange. 


And thanks to content management and 


workflow capabilities added in the past 


year, Southwire’s managers can approve 


and post announcements to the portal, 
without involving IT. 

“We had several independent Web 
sites and a fairly robust e-commerce 


site. The portal provides an umbrella to 
bring all those separate Web sites under, 
along with providing a single sign-on, 
multilevel security access, customization 
and personalization,” says Sheila Simp- 
son, a Web development manager in 
Southwire's IT Services group. The un- 
derlying portal technology is from Sy- 
base Inc. in Dublin, Calif. 

“Southwire was trying to be ahead 
of the game - at the urging of our CEO,” 
recalls Simpson. “With ali this Internet 
hoopla, the thinking was that surely there 
was something we could do with it.” 

The portal was first funded as a re- 
search and development effort, separate 
from IT services. Southwire's initial por- 
tal offered only 1.200 commonly ordered 
products out of the company’s 65,000 
stock numbers. 

The emphasis wasn't on creating a 
“pretty front-end storefront” for the or- 
dering site, according to Simpson. The 
true business need was cutting costs 
associated with processing lots of paper 


and increasing productivity. 


“We didn’t want the behind-the- 


scenes manual processing,” says Simp- 
son. “Southwire [in 2000 and 2001] was 
hit, like a lot of other companies, with 
trying to become more efficient. We did 
not need to create more work, we need- 
ed to eliminate work, to streamline,” 

she says. 


Thus came the emphasis on integrat- 


ing the order site to the back-end sys- 
tems. The company eliminated a signif- 
icant chunk of manual work, which 
means fewer telephone calls to answer 
and less faxed information to rekey into 
the computer system. 


The push to streamline operations is a 


big part of the portal popularity, and not 
just at Southwire, according to Raj Shah, 
manager of business consulting at Sapi- 
ent. “They're looking for consolidation of 
systems and processes . . . and portals 
are the [user interface] of technology 
consolidation.” 


- Connie Winkler 
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Lessons learned at the Department 
of Energy can be applied to the 
corporate world. By Dan Verton 


INDRED 
an 


A 
Notra Trulock’s book, Code Name 
Kindred Spirit, offers corporations a 


lesson in being vigilant about security. 


MORE ONLINE 


For the full interview with Notra Trulock, 
visit our Web site: 


eg QuickLink 36445 


www.computerworld.com 





A new book by Notra Tru- 

lock, former director of 

intelligence at the U.S 

Department of Energy, 
details how apathy and politics can in- 
fect the decision-making of senior man- 
agers and create a security nightmare 
for frontline administrators. 

Code Name Kindred Spirit (En- 
counter Books, 2003) takes readers in- 
side the Chinese nuclear espionage 
scandal that occurred between 1995 and 
2001 at the Los Alamos National Labo- 
ratory and led to the DOE’s investiga- 
tion of nuclear scientist Wen Ho Lee. 
Trulock also sheds new light on how se- 
nior DOE management contributed to 
the appalling state of computer and en- 
terprise security that contributed to the 
possible disclosure of the U.S.’s most 
sensitive nuclear secrets. 

In an interview with Computerworld, 
Trulock offered insight into how mis- 
management of security issues at the 
highest levels of an organization can 
have devastating results. 


In your book, you wrote about many man- 
agement and leadership shortcomings at the 
DOE, and especially how those shortcom- 
ings had a debilitating effect on enterprise 
security. Can you expand on a few examples 
that might offer some sober lessons for 
large corporations? Most importantly, I 
think, security was sharply devalued 
by the Energy Department and senior 
lab managers during the 1990s. It is 
common knowledge that budgets were 
run down and both manpower and 
training were sharply cut back. By far 





the worst offense, however, was the 
corruption and manipulation of securi- 
ty standards and measures of perfor- 
mance imposed by these officials. 

Time and again, senior managers 
fudged or simply suppressed the re- 
sults of security exercises, evaluations 
and self-assessments. More than once, 
senior lab managers were caught red- 
handed pressuring security officials to 
revise upward poor marks on security 
exercises. In other cases, the outcomes 
of such exercises were rigged to con- 
ceal vulnerabilities. Inevitably, senior 
management officials also had to sup- 
press and silence those security offi- 
cers unwilling to go along with the 
coverups. 


You also wrote that you “witnessed many 
incidents in which Cl [counterintelligence] 
officers were asked to report on the same 
people who wrote their performance ap- 
praisals, granted raises and approved bud- 
gets.” What lessons and suggestions should 
come out of this for large corporate security 
programs that might be wrestling with find- 
ing the right management structure? I 
don’t know whether the problems I 


| witnessed are unique to the national 


labs. As counterintelligence was de- 


| emphasized [along with security] at 


the labs in the 1990s, CI units were 
pushed further down the lab structure 


Age: 55 
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editor at Accuracy In 
Media, a Washington- 
based media watchdog 
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to the point that multiple layers of man- 
agement existed between Cl officers 
and the lab director. Consequently, CI 
[and security] problems rarely were 
brought to the attention of the lab di- 
rectors or their senior management 
group. For a time at Los Alamos, the CI 
[group] reported to a unit that was also 
responsible for hallway maintenance 
and replacing burnt-out light bulbs. 

First and foremost, large corporate 
enterprise security units should enjoy 
high visibility within the enterprise 
and report directly to either the chief 
executive or chief operating officers. 
The further down a [security] unit is in 
the corporate structure, the greater the 
potential for interference and obstruc- 
tion in the performance of the unit’s 
mission. 


For companies that have large volumes of 
intellectual capital and proprietary research 
to protect, what is your advice on how to 
achieve an appropriate level of security 
while at the same time maintaining enough 
flexibility to remain competitive? The 
1990s were a period in which senior 
managers refused to think through the 
long-term implications of losing se- 
crets vs. the short-term political bene- 
fits of openness or declassification. In 
an enterprise setting, I suppose this 
would entail deciding what is worthy 
of protection and what senior man- 
agers might be willing to concede to 
potential competitors. The costs of 
lost or stolen data would have to be 
factored into such an equation. Flexi- 
bility might not be valued so highly if 
the loss of sensitive data undercut an 
enterprise’s competitiveness. 


You mention one instance in which a lab 
director simply crossed out classification 
markings on a document and released it to 
the media. We now know that the document 
in question contained sensitive information. 
What should corporate security managers 
do when confronted with similar situations? 
I assume you mean beyond updating 
his or her résumé and looking for a new 
job? Security managers can try a slow, 
steady process of educating the CEO 
to the potential downsides of lax secu- 
rity. I know of one Fortune 100 corpo- 
ration whose world-famous CEO total- 
ly disdained security of any type and 
made nearly all corporate locations 
open campuses. He retired just before 
9/11 and left his successors a staggering 
problem of how to protect corporate 
assets worldwide against terrorists de- 
termined to attack symbols of Ameri- 
can economic power. His successors 
had to start from scratch to rebuild se- 
curity at the corporation’s facilities. D 
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PAUL BRINKLEY, vice 
president and CIO at 
JDS Uniphase Corp., a 
$1.1 billion fiber-optics 
company in San Jose, 
has cut corporate IT ex- 
penditures by $35 mil- 
lion annually by out- 
sourcing its Oracle ap- 
plications (data center, 
product data manage- 
ment and help desk support) to an unlikely 
vendor - Oracle Corp. itself. JDS has used 
Oracle software for the past three years in 
application service provider (ASP) deals 
with Quest Software Inc. and Corio Inc. 
Brinkley talked with Computerworld’s 
Jean Consilvio about JDS’s decision to 
outsource to Oracle, which in an effort to 
bolster sagging sales has been lobbying 
customers to pay it to run and manage its 
own Oracle products. 


What made you outsource to Oracle? We 
moved to Oracle as a turnkey solution 
provider for their application. They're provid- 
ing software, hardware and integrated com- 
plete end-user services. This has enabled us 
to consolidate all of our [Oracle] support [for 
all of our global business operations], so 
there's a single point of accountability for 
end-user services. We also agreed to up- 
grade to tli, and we didn’t want to deal with 
multiple solution providers or independent 
support and consultant firms doing an Tli 
upgrade on the timeline we needed to pur 
sue; we did it in six months globally. 


What effect will this have on your IT folks? 
The company has always been dedicated to 
an outsourced IT model, so we didn’t have 
internally a lot of people doing these func- 
tions. Two things help keep head count low: 
a single-instance environment . . . so we 
don't have people who support an ERP sys- 
tem dedicated to a single site or business 
unit, and [second] because it’s outsourced. 

The company first went with Quest as an 
ASP three years ago. Quest did well in some 
things and struggled in others, so other 
firms were brought in to supplement Quest. 
And it just grew in complexity. 


How did you estimate the savings? We pay 
a fixed amount, and it’s a [large] part of my 
IT budget. Our company has gone through a 
significant operational restructuring to cen- 
tralize a lot of functions. This deal was the 
trigger that allowed us to rescale our IT op- 
erating expenses. We've gone through 
tremendous growth, from a very small com- 
pany to a $4 billion company, and now with 
the telecom decline, we've radically had to 
scale [everything companywide] back down. 





JOHN BERRY 


ROL Whose Job 
Is It, Anyway? 


ECENTLY, I conveyed the elements of a 
comprehensive return-on-investment 
program to the IT organization of a 
small but fast-growing company. The 
presentation included how a financial 
forecast looked, how the company needed to plan for 
change when the metrics in the forecast hinted at it, 
and why the auditing of actual postinvestment re- 


turns was a good idea. 


About two-thirds 
through, one of the senior 
IT fellows interrupted 
me, questioning the will- 
ingness of business units 
to adopt these practices. 

“Glad you asked,” I said. 

I turned the question 
around and asked why the 
IT group — curious 
enough about better prac- 
tices in IT management 
to have me come in to 
demonstrate some tech- 
niques — couldn’t evolve 
into a value-added busi- 
ness partner that could 
help business units with economic 
value management tasks. 

For example, a business unit would 
request a custom or packaged appli- 
cation, and IT, working in partner- 
ship, would deliver an economic 
forecast, change management tactics 
and perhaps a method for quantify- 
ing the intangible ROI and a post- 
investment audit capability. 

The IT executive smiled, nodding 
in agreement. Could his response 
have been more out of politeness 
than conviction that what I said was 
tenable at his company? Yes, talk is 
cheap. 

Overlooked but very much needed 
amid all the buzz about quantifying 
financial returns on IT investments 
are answers to some basic questions. 





Who is willing and able 
to roll up their sleeves 
and get into the mechan- 
ics of building a forecast? 
Who will build consensus 
for the metrics to be in- 
cluded in the forecast? 
Who will document the 
potential organizational 
and business-process 
change some software is 
sure to inject into the 
company? 

In other words, who is 
going to champion a con- 
sistent, repeatable IT 
measurement program 

and see that it happens and thrives? 

Theoretically, there is no reason 
why economic value management 
practices can’t originate and become 
operational in the IT organization. 
But the politics of the situation say 
otherwise. 

In reality, the broad trend has been 
for such a management course to 
originate in business units, which in- 
creasingly have control over discre- 
tionary IT budget expenditures. The 
IT organization’s budget, meanwhile, 
is largely confined to life-cycle man- 
agement expenditures, upgrades, re- 
placements and maintenance. 

However, with control comes ac- 
countability. Lines of business can 
chart their technological destinies, 
but senior management is also hold- 





ing them accountable for the returns 
their investments deliver. This com- 
pels business units to manage the 
risks and uncertainties of their in- 
vestment decision-making. This is 
accomplished by adding clarity to 
these decisions — economic fore- 
casts, metrics construction, the 


| whole measurement megillah. 


Now, square the budgeting trends 
and related measurement responsi- 
bility with an equally important real- 


| ity showing IT’s genuine interest in 
| busting out of its utility services role. 
| In the case of this high-growth com- 


pany, the IT group aspires to partici- 


| pate at a more strategic level. 


Contemplate the tension: Budget- 
ing realities are driving accountabili- 
ty (meaning ROI mania) to business 
units, while IT seeks to participate 
more fully in the strategic affairs of 
the company by playing a larger role 
in ROI measurement and related ac- 
tivities. The business side might very 
well wish to relinquish measurement 
to IT, but senior management is say- 


| ing, “You want that $500,000 CRM 


application? Then you show me the 
value, since you have the budget.” 
As it turns out, this company’s IT 


budgeting is centralized, not in defi- 


ance of the trend, but most likely be- 


| cause of its size. As its revenue 


grows, as its need for complex appli- 
cations grows, it might decentralize 
budgeting too. Today, IT in this com- 
pany is excited about the chance to 
lead a transformation effort that em- 
beds forecasting and measurement in 
investment decision-making. 

Business units that avoid the heavy 
lifting of IT economic value manage- 
ment, pinch yourselves. This sce- 
nario is likely not the future. D 
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Space Saving PC-in-a-Keyboard! 


Cybernet has created the most common sense PC ever. 
That's right! We've gotten rid of the Box. 


Wondering how we were able to put an entire 
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with LCD flat-screen monitor 
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Monitor: PS2 Mouse. Microsoft 
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New! APC solves top 4 rack problems. 


Benefit today from optimal cable management With a full range of compatible APC components 

TOP FOUR RACK-BASED PROBLEMS ee ae Se , 
effective cooling, and remote power distribution you Can customize a solution to fit current avail- 
The NetShelter® VX rack enclosure supports your ability needs, and build upon this foundation as 

% ate) =) at) NUODMER TE, entire data environment, including servers, net- future requirements change. Why wait? To find out 
working and communications, and storage devices. more today, visit us online at www.apc.com 
1 Cabling Additional enclosure depth for better 
Nightmares cable management and power distribution NetSh 


Next generation, high-quality enclosures 


Optimal cooling distribution and heat 


+ Fully ventilated front and rear doors with enhanced ventilation pattern maximize airflow 
Hot Spots exhaust for rack environments Y 7 ee 


* Overhead, base and side cable access provides easy, integrated cable management 
+ Rear Cabling Channel (42” deep versions only) allows for easy installation, 

access and serviceability of both data cables and power distribution 
+ Available in multiple configurations: 35.5” deep, 42” deep, beige or black 


Blown Circuit Monitoring of power and environment at 
Breakers rack helps avoid downtime 


Brand Vendor-neutral mounting backed up by 
Incompatibility — “Fits like a Glove”* money-back guarantee 


(X-CERTIFIED) [4- 
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Economical solutions for wiring closets and networking applications 

+ Designed to accommodate networking devices such as hubs, routers and switches 
+ Industry standard 7’ high design provides 45U of equipment mounting space 

+ Self-squaring design allows one-person assembly 

* Made of high-strength 6061-16 structural-grade aluminum 


Air Distributi 
2U rack-mounted fan unit distributes cool air to rack enclosure equipment. 

« For racks up to 3kW of power consumption on raised floors 

« Adds 30% efficiency air filtration to supply air for equipment intake 

« Delivers equalized airflow from the bottom to the top of the rack enclosure with dual fans 
« Adjustable depth to fit most leading enclosures 


Heat removal for enclosures in IT rooms and data center hot spots 

« Enables up to 7.5kW of power consumption in a rack, without taking up U space 

- Automatic fan speed adjustment leads to greater energy efficiency 

- Dual-power input cords allow the unit to attach to redundant power sources 

« Ducting kit to drop ceiling plenum allows higher temperature from equipment exhaust 
to be delivered directly to A/C retum stream 


Distribute, monitor, and remotely contro! power in rack enclosures 


* Basic: Vertically and horizontally mounting with a range of amps 
and voltages 


* Metered: Ability to monitor the current draw and set alarm thresh- 
olds that when exceeded, provide both visual and audible alarms 


* MasterSwitch®: Advanced, remote power distribution and 
contro}. User configurable. Users can configure the sequence in 
which power is provided to individual receptacles upon start up 


Monitors environmental conditions in racks and rooms : 


‘a 
; + os 
* Sensors continuously monitor the temperature and humidity of environment —s ™ i. 
* Four user-definable external inputs allow use with sensors for fire, 4 a 
water, smoke, unauthorized entry and physical security = . 
* Communicates information in a variety of formats to ensure that your application is supported 
HP/COMPAQ + SUN * IBM 
GUARANTEED 
UAE 


DELL * CISCO * LUCENT Rack-mount LCD monitors save space in IT environments 


in * Provides optimal functionality while utilizing only 1U (1.75") of rack space 
ike a Glove” guarantees 
4s of EIA-310-D 
int equipment fit inside. 


FREE APC Rack Power Distribution 


Unit for the first 100 entrants! Arc 


Get yours today! Visit http://promo.ape.com Key Code j561y © Call 888-289-APCC x6516 © Fax 401-788-2797 Legendary Reliability” 


©2003 American Power Conversion Corporation. All Trademarks are the property of their owners * E-mail: esupport@apcc.com * 132 Fairgrounds Road, West Kingston, Rl 02892 USA * APCIO3EF-US 
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Among the most aggressive industries using 
information technology to enable business is 
financial services. Despite the upheaval of the 
past two years, the industry continues to lean 
on information technology and its profession- 
als to drive change in the future. Over the next 
12 to 48 months, the priorities for the industry 
— whether a traditional banking institution such 
as Wells Fargo or E*Trade, which introduced 
online trading 20 years ago — fall into four 
categories: security, peer-to-peer networking, 
mobility and web applications. 


The issue of security was evident when the 
Slammer worm hit the Internet in January, 

closing down ATMs across the country for at 
least part of the weekend. For E*Trade, which 
has the second largest automatic transaction 
machine network in the United States, that kind 
of problem is a killer. Peer-to-peer networking is 
an issue for Wells Fargo as it consolidates nation- 
wide operations. And for Edward Jones, extend- 
ing the business capability and service to custom- 
ers through mobility, new web applications and 
security is a model for what most institutions face. 


Rodney Gee, general principal over human 
resources in information systems at Edward Jones, 
has a short list in terms of priorities for IT profes- 
sionals in the future. The base is technical skills, 
which at Jones translates to Java-based program- 


Today, The Nasdaq Stock Market® 
is the largest and fastest growing 
stock market in the United States 
lisung over 3,800 of the worid’s 
most innovative companies. We 
are Currently looking to fill the fol- 
lowing positions in Trumbull, CT 


Systems Analysts (Code#200301) 
Systems Analysts (integrator) 
(Code #200302), System Analysts 
(TAL) (Code #200303), Senior 
Systems Analysts (Code #200304) 
and Software Engineers (Code 
#200305) 


You will analyze, implement, main- 
tain and support HP NonStop: 
Tandem-based real-time stock trad- 
ing systems. Systems Analysts re- 
quire min. 1 yr. exp. as Systems: 
Technical Analysts. Some positions 
require knowledge of TAL, pTAL 
Posigre SQL and Oracle 8.0 tech- 
nologies. Sr. Systems Analyst and 
Software Engineering positions 
require knowledge of Guardian and 
UNIX/OSS operating environments 
and min. 2 yr. exp. Software Engin- 
eer positions requires master's 
level degree. Please send resum- 
es, indicating code # you are apply- 
ing for, to: The NASDAQ Stock 
Market, Inc., Human Resources, 45 
Commerce Drive, Trumbull, CT 
06611, or e-mail resumes to 
careers.CT@nasdaq.com. Only 
qualified candidates will be contact- 
ed. We are an equal opportunity 
employer committed to diversity in 
the workplace 


ALGORITHM DEVELOP-] 
MENT ENG -- Designs 
and develops pattern 
recognition algorithms for 
medical applications. 
Master's degree _ in 
Elec./Computer Eng. Will 
pay prevailing wage 
Send resume to Ziling 
Huo, Beckman Coulter, 
Inc. 11800 SW 147th 
Ave., Miami, FL 33196 or 
fax to (305)-380-3647. 
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NET2S is a leading International 
Consulting and Engineering firm 
specializing in communications 
technologies. We are presently 
seeking to fill the following posi- 
tions 

Business Analyst (NYC) 
Develop and implement marketing 
strategies. Manage sales life cycle 
including client presentations and 
negotiations. Oversee project 
management including deploy- 
ment and roll out. Co-manage pro- 
ject center. 

Must possess excelient communi- 
cation skills as well.All positions 
require BS/MS degree with a min- 
imum of 2 to 3 years of experience 
in the field. Must possess excel- 
lent communication skills as well 
NET2S, 82 Wall Street Suite 400, 
New York, NY 10005; Fax: (212) 
279- 1960; Phone (212) 279-6565, 
or Email: jobus-ny@net2s.com 


EXPERIENCED iT 
PROS NEEDED 


DBAs, P/A, & Proj. Managers to 
design, develop, admin, and 
support DBs: Sybase, SQL 
Server, Informix, Oracle& Rdb 
Disaster recovery plan/imple- 
ment, per. tuning, back up/ 
restore and troubleshoot 
Expert in WinNT, VAX/VMS, 
SCOUnix, TCP/IP, PowerBuiid- 
er, Access, and C++. MS 
Proxy/SMS Server & IIS to 
develop web DB applications 
Expert RDB theories, CASE & 
RDBMS physical implementa- 
tions required. Job Location 
San Francisco Area and 
Phoenix. Please submit resume 
to: Apex Software, Inc., 4718 E 
Cactus Road, #206, Phoenix, 
AZ. 85032 
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IT CAREERS IN FINANCIAL SERVICES 


ming, database development, system programming 


and administration, and network and technical 
architecture. “We look for people who have dem- 


onstrated the ability to learn new skills,” says Gee. 


“So if you don’t have Java but have proven to be 
an excellent programmer in another language, 
we'll help you get that capability.” 


Edward Jones, headquartered in St. Louis, supports 


a world network of locations, and IT pros align 
to the businesses. “So it’s important to be able 
to leverage the capabilities of a teammate,” says 
Gee. “At Jones that is much more important than 


SOFTWARE ENGINEERS (12 
positions): require Bachelor's or 
equivalent in Engineering/Com- 
puter Science/Mathematics/Sci- 
ence or closely related field with 
experience providing skills in 
described duties. Competitive 
salary and benefits. Provide on-site 
consulting in design, analysis and 
development of software applica 
tions for legacy systems in IBM 
mainframe environment; develop- 
ment and administration in Oracle, 
DB2, SQL Server and Sybase; e- 
commerce and web applications 
development in Microsoft, Java and 
related technologies; network man- 
agement systems development 
with Netscape Server and related 
tools; SAP R/3 applications on 
Windows with DOS and ABAP/4 
and related modules. 40% travel to 
client sites in the United States. 
Mail resumes to: Vice President, 
Y&L Consulting, inc., 7550 | H 10 
West, Suite 940, San Antonio, TX 
78229. 


Seeking qualified applicants for the 
following positions in Memphis/ 
Collierville, TN: Senior Business 
Application Analyst, Formulate/ 
define systems’ scope and objec- 
tives based on user/customer 
needs and a good understanding of 
applicable business systems and 
industry requirements. Require- 
ments: Bachelor's degree* in com- 
puter science, math, statistics 
business or related field plus 5 
years of experience in analyzing 
business systems and developing 
technical automated solutions 
Experience with business case 
development and project menage- 
ment tools (¢.g., Primavera Project 
Planner, TeamPlay, MS Project or 
MS Access) also required 
*Master's degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to 
Sibi George, FedEx Corporate 
Services, 1900 Summit Tower 
Bivd., Suite 1400, Orlando, FL 
32810. EOE M/F/D/V. 


Telecheck Services, Inc., a 
Division of First Data Corpor- 
ation, a company in Greenwood 
Village, CO specializing in check 
guarantee, has an opening for 
an Intermediate Software 
Developer to work in Houston, 
Texas and other unanticipated 
job sites in the U.S.. Engage in 
full life-cycle software develop- 
ment involving object-oriented 
design and development 
Requires a bachelor's degree in 
computer science; experience 
implementing and integrating 
ORACLE products; and working 
knowledge of C, C++, Java, 
Shell Scripts, Windows 2000, 
SQL, and Unix. Respond by 
resume to Norm Barnett, First 
Data Corporation, 6200 S 
Quebec St., Suite #2000 West, 
Greenwood Village, CO 80111 
and refer to job #3963DE 


Software Engineer wanted at 
NY office of Empact Solutions to 
design, develop, test, implement 
and provide maintenance sup- 
port for EyeQ software. Must 
have analytical, trouble shoot- 
ing, and problem solving skills 
Experience with Java, JSP, 
Serviet ASP, Perl and 
Win2000. Design and document 
capability with UML. Experience 
with use cases, class diagrams, 
sequence diagrams and state 
diagrams. Database knowledge 
with Oracle, DB2, and SQL 
Server/ Analysis. Hands on pro- 
gramming with EJB, J2EE, XML, 
and C++. Must have a BS in 
Computer Science or 
Engineering, and at least 2 
years of experience. Send 
resume to NY Recruiter at 
careers@empactsolutons.com 
referencing code SENG 
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your abilities as a lone ranger. And, probably, the 
biggest thing needed before folks move on in their 
careers is understanding the bigger business con- 
text and how IT can enable that business model.” 


Keith Irwin, manager of learning and development 
at Wells Fargo Services, says creating this type 
of workforce encompasses myriad programs. His 
group provides more than 350 courses online. 
The courses are configured into maps that track 
with Wells Fargo’s careers of the future. “There’s 
no one thing that keeps me awake at night,” he 
admits. “It’s the full range. In financial services, 
we’re still using mainframes, but we also are 
moving rapidly in the areas of web applications 
to deliver services to customers. 


“That means we’re working to cover all the 
bases because we can’t afford to fall behind in 
any one.” 


IT Careers 

For further information, please contact: 

Nancy J. Percival, Director, Recruitment Advertising 
at 800-762-2977 

500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 


e-lite companies 
e-merging companies 


e-ssential companies 


@-normous opportunities 


it|careers.com 


where the best get better 
1-800-762-2977 
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Sr Consultant (dynaSightSAP 
specialist) for comp s/ware 
dvipg, mktg & service co. in 
Wayne, PA for job in Rochester, 
NY. Duties incl.: dsgng & dvipg 
web-based Business Intellig- 
ence (Bl) applics & providing 
related impimtn svces. Exten- 
sive travel required. Reqs: Mas- 
ter’s or equiv in Bus./Technology 
or related field. Syr exp in job 
offd or Syr exp in translating bus 
info reqmts into reporting or BI 
solutions. Applicants must have 
significant SAP exp, SAP BW 
impimtn exp & dynaSight 
impimtn exp. Respond to 
Michael Dieterle, Director of 
Professional Services, arcplan 
Inc., 900 West Valley Road 
Suite 204, Wayne, PA 19087. 


NEED TO HIRE? 
START WITH US! 


Call your ITcareers Sales 
Representative or 
Nancy Percival at 

1-800-762-2977. 


ey O14 


Assistant Director, 
Network Systems 
Development and Support 


The University of Kansas is seeking 
an accomplished individual to play 
a key role in our dynamic, service- 
oriented information technology 
environment. This new position 
leads the technical systems group 
responsible for the development 
and ongoing maintenance support 
of the enterprise communications 
systems for KU. As part of the NTS 
management tearn, the successful 
candidate will provide vision and 
technical guidance to ensure the 
effective and efficient utilization of 
‘communications technology at KU. 


For complete information on the 
position, required qualifications, 
and application procedures, see 
iwww.nts.ku.edy or contact Ann 
Ermey @ NTS; 1736 Engel Road, 
Lawrence, KS 66045 785-864- 
9310 or email aermey@ku.edu. 


Complete applications postmarked 
by April 1, 2003 will be given first 
consideration. EO/AA Empioyer. 


NETWORK WORLD, 
COMPUTERWORLD, 


AND INFOWORLD 


Hetp You Do A BETTER Jos. 


Now Let Us HELP 


You GET ONE. 
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Full-time Software Engineer 
Middleware Developer responsi- 
ble for program design and analy- 
Sis, coding, testing and imple- 
mentation for numerous projects. 
Define applications architecture 
land document applications func- 
tionality expansion and customer 
integration. Develop applications 
requirement specifications and 
develop software and documen- 
tation according to established 
standards. Provide end-user sup- 
port, identify and troubleshoot 
defects found. Work with Oracle, 
C++, PL/SQL, Java, MQ Series, 
MSQI, E-SQL. Must have a 
Bachelor's degree in Computer’ 
Science, Information Systems or 
related field. Educational and or 
work background must have 
included the above-referenced 
skilis. Salary Competitive. Send 
resume to: Robbin Lee, United 
Parcel Service, 12380 Morris 
Road, Alpharetta, GA 30005. 
Employer will not sponsor visas 
for position. 


Seeking qualified applicants for the 
foliowing positions in Memphis/ 
Collierville, TN: Senior Programmer 
Analyst. Formulate/define function- 
al requirements and documentation 
based on accepted user criteria 
Requirements: Bachelor's degree* 
in computer science, MIS, engi- 
neering or related field plus 5 years 
of experience in systems/applica- 
tions development. Experience with 
Java, C++ and CORBA also re- 
quired. *Master’s degree in appro- 
priate field will offset 2 years of 
general experience. Submit resu- 
mes to Sibi George, FedEx 
Corporate Services, 1900 Summit 
Tower Bivd., Suite 1400. Orlando. 
FL 32810. EOE M/F/D/V. 


SR J2EE/IVR Devel- 
oper. 2+yrs exp design, 
develop, & implement 
scalable platforms at 
least one of which must 
be on large scale tele- 
phony sys, J2EE, 
TomCat, Apache Edify & 
IVR. Submit resume to 
Tracy Smutko, Res- 
ource Mgr NCS 
Technologies 242 Old 
New Brunswick Road, 
Piscataway, NJ 08854 


Software Engineers & 
Programmers 


Analyze, design, test and imple- 
ment specialize software appli- 
cations for e-commerce, Web. 
Client Server technologies, 
Legacy systems and distributed 
apps. in Weblogic, Corba 
Apache, Mainframe, ASP, J2EE, 
PB and related technoiogies uti- 
lizing appropriate RDBMS 
including Oracle and DB2. HR, 
Instcomp, Inc., 906 Lacey Ave., 
Suite #206, Lisle, IL 60536. 
EOE 


Software Engineer: Design, 
develop, implement, test the 
business applications in areas of 
data access, data extraction, 
conversion, migration, proce- 
dures, data modeling, quality 
assurance using Oracle 8.0, 
PL/SQL, Oracle Designer, 
Developer 2000 and Oracle 
relational database tools or a 
Unix system. Requires MS in 
Comp. Sci. Engg/Related field 
with 2 yrs exp or BS with 5 yrs 
exp. Wages: $90,000/yr, 40 
hrs/wk, 8am-Spm. Send 2 
resumes to: Case#200115737, 
Labor Exchange Office, 19 
Staniford St. 1st Fl., Boston, MA 
02114. 


Job Code SSA. Manage web and 
eCommerce projects using VB. 
NET, ASP.NET, Visual Basic 5.0/ 
6.0, HTML, DHTML, JavaScript, 
VBScnpt, ASP, XML/XSL, SOAP. 
COM/COM+, MTS, SQL Server! 
2000/7.0/6.0, Oracle, DB2, Office 
Object Model (VBA), Seagate 
Crystal Reports, IIS 5.0. System 
Analysis/Reviews, database design 
using ERWIN, quality issues using 
CMM levels. Maintain Ebix soft- 
ware: Ebix-One, Ebix-ASP, Ebix- 
Exchange, Ebix-SaleSource, Ebix- 
Mail and Elite. Microsoft certifica- 
tion as a solutions developer. BS + 
2 yr. of exp. in software field 
(Requires 1 yr. exp. with Ebix soft: 
ware packages) OR no BS + 5 yr. 
of experience in software develop- 
ment. 


Job Code SSBA. Analyze client b/z 
proc., project planning, software 
dev., QA & team mgmt. Conduct! 
reqs. and system analysis, review 
b/z sols., and end user needs. 
System arch. & database dsgn., 
deploy and dev. software on 
Microsoft tech. like ASP.net and 
C#, Active Server pages, VB.NET/ 
Visual Basic 6.0, VBScript, Java- 
Script, Microsoft Transaction Ser- 
ver, SQL Server 2000, COM/ 
COM+, DCOM/MS.NET Remoting, 
XML/XSL, Rational Rose, data 
modeler like ERWINm, Windows 
2000/NT and Intel Based ma- 
chines. Maintain Ebix software 
packages: Ebix-One, Ebix-ASP 
Ebix-Exchange, Ebix-SaleSource 
Ebix-Maii and Elite. BS in CS + 2 yr. 
of exp. in software field (Requires 2 
yr. exp. with Ebix software pack- 
ages) OR no BS + 4 yr. of experi- 
ence in software development 


Competitive salaries. Apply with 
Job Code to EBIX, 5 Concourse 
Parkway, # 3200, Atlanta, GA 
30328 with proof of work authoriza- 
ton, 


Senior Network En- 
gineer req'd for CT 
telecom co. Must be 
CCIE and have M.S 
or equivalent, 4 yrs. 
Practical experience 
required. NO TELE- 
PHONE CALLS 
Please. Send Resu- 
me to: attn. Jim 
Florwick Globaicom 
LLC, P.O. 605,Old 
Greenwich,CT.06870 


Sr Consultant (dynaSight/ 
Hyperion Essbase-Oracle spe- 
cialist) for comp s/ware dvipg, 
mktg & service co. in Wayne, 
PA. Duties inci.: dsgng & dvipg 
web-based Business Intellig- 
ence (BI) applics & providing 
related impimtn svces. 
Extensive travel required. Reqs: 
Master's or equiv in Bus/info 
Systms or related field. Syr exp 
in job offd or Syr exp in transiat- 
ing bus. info reqmts into report- 
ing or BI solutions. Applicants 
must have significant Oracle & 
Hyperion Essbase impimtn exp. 
Respond to: Michael Dieterle, 
Director of Professionai 
Services, arcplan Inc., 900 West 
Valley Road, Suite 204, Wayne, 
PA 19087 


Software Developer 
Full-time position in Wheaton, 
IL. In this position you will deliv- 
er quality code in a collaborative 
environment, as well as docu- 
ment and communicate techni-} 
cal and architecture information 
as needed. Required: Master's 
degree in Engineering, Computer 
Science or related field; 1+ year 
of experience in developing N- 
tier DNA application using ASP, 
VB.COM, DCOM, SQL, server 
javascript, remote scripting; 6+ 
months experience in develop- 
ing in Web Farm Environment 
and 6+ months of development 
experience in ASP.net, VB.net, 
XML, XSL and Xpath. Contact 
miwinski@warrantycheck.com. 


Boehringer Ingelheim Pharma- 
ceuticals, inc. has an immediate 
opening in its Ridgefield 
‘Connecticut facility for the posi- 
ition of Lead Business Analyst 


Provide business knowledge and 
technical leadership in identifying 
projects, conducting feasibility 
studies, evaluating system de- 
sign and determining cost/benefit 
and economic justification on ail 
IT projects to address the sys- 
items and technology needs of the 
assigned business area 


Must possess a Bachelor's 
degree or its equivalent in 
Business Administration, Compu- 
ter Science, Information Systems 
lor a related field and relevant 
experience with SAP-Business 
Analysis skills in SD and HR 
modules, the development of 
custom database programs using 
Oracle, Visual Basic and SQL- 
based RDBMS. automated tools 
to automate SAP test script spec: 
ifications and Software Project 
Implementation and Analysis 


Resume and/or cover letter must 
reflect each requirement above 
and specify reference code AD- 
GCD/GC0103 or it will be reject- 
ed. 


Forward resume to: BI Staffing 
Center, PO Box 534, Waltham 
MA 02454. Fax number: (787) 
663-2431 

Email: BIPI@BI-careers.com 


MEeT2s 


NET2S is a leading international 
Consulting and Engineering firm 
specializing in communications 
technologies. We are presently 
seeking to fill the following posi- 
tions: 


* Sr. Tibco (RV, integration Mgr) 
Developer 


* TIBCO/TRIARCH Systems 
Engineer 


* Sr. Security Systems Engineer 


All positions require BS/MS de- 
gree with a minimum of 2 to 3 
years of experience in the field. 
Must possess excellent communi- 
cation skills as well 


NET2S, 82 Wall Street Suite 400 
New York, NY 10005; Fax: (212) 
279- 1960; Phone (212) 279-6565; 
or Email: jobus-ny@net2s.com 


Programmer Analyst 
Experience w/ C++, 
VB, Java. Must have 
BS in CS, Comp. 
Eng., or EE. Must 
have authority to 
work in US. Send 
cover letter and 
resume to Jennifer 
clo PCS at 1415 N. 
Dayton, Chicago, IL 
60622. 


Remedy Applications 
Engineer / System 
Administrator req'd 
for CT telecom co. 
Must have M.S. or 
equiv't + 3 yrs. exp. 
NO TELEPHONE 
CALLS Please. Send 
Resume to: attn. Jim 
Florwick Globaicom 
LLC, P.O. 605,Old 
Greenwich,CT.06870 
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Prosoft Technology Group, inc. 
iS a nationwide professionai 
software-consulting firm. We 
offer competitive salaries, full 
benefits and a team spirited 
success driven environment 
The positions of Programmer 
Analyst (ERP) and Programmer 
Analyst (EAI/B2B Integration) 
require at least two (2) years of 
work experience. All other posi- 
tions require at least one (1) 
year of experience in one or 
more of the following skill sets 
and also ail positions require at 
least a Bachelor's degree in 
Computer Science or 
Engineering (any fieid) 
PROGRAMMER ANALYST 
(ERP): 

SAP R/3 Functional Modules. 
ABAP/4 Reporting, BASIS, BW 
and CRM 

Oracle Applications. 

Peoplesoft, Siebei 
PROGRAMMER ANALYST 
(EA! / B2B integration): 

Web Methods (EAi and B2B 
Integration), See Beyond and 
Mercator 

PROGRAMMER ANALYST 
(eSolutions): 

SAP Portals (Top Tier), Web 
Logic, Web Sphere, iPianet 
and J2EE Technologies 
PROGRAMMER ANALYST 
(Knowledge Management): 
Data Warehousing, Enterprise 
Reporting, Actuate, Cognos. 
Business Objects and Crystal 
Reports 

System Administrators and 
DBA: 

Unix Administrators (Solaris. 
AIX, HP-UX, DEC-Unix, NT 
LDAP, Oracle DBA and SQL 
DBA 

Business Development 
Manager: Requires a Bache- 
lor’s degree in Business 
Administration or Engineering 
(any field) with at least one (1) 
year of experience in 
information Technology 

ALL POSITIONS REQUIRE 
FREQUENT TRAVEL AND 
RELOCATION THROUGHOUT 
THE U.S. ONLY QUALIFIED 
U.S. WORKERS NEED APPLY. 
Please mail your resume with 
Ref # Pete - 2003 to Attn: HR 
Manager, PROSOFT TECH- 
NOLOGY GROUP, INC., 2001 
Butterfield Road, Suite 1050 
Downers Grove, IL 60515 


SOFTWARE ENGINEERS (8 posi- 
tions): require Bachelor's in Engin: 
eering/Computer Science/Mathe- 
matics/Science or closely related 
field with experience providing 
skills in described duties, at 
$65,000 per year; Senior Software 
Engineers (8 positions) with Mas- 
iter's and two years experience, at 
$70,000 per year. Provide on-site 
consulting in design, analysis and 
development of software applica 
tions for legacy systems in IBM 
mainframe environment; develop- 
ment and administration in Oracle. 
DB2, SQL Server and Sybase; e- 
commerce and web applications 
development in Microsoft, Java 
and related technologies, network 
management systems develop- 
ment with Netscape Server and 
related tools; SAP R/3 applications 
on Windows with DOS and 
ABAP/4 and related modules. 40% 
travel to client sites in the United 
States. Mail resumes to: YASH 
Technologies, Inc., Human Re 
sources, 605 17" Avenue, Suite 1 
East Moline, IL 61244 


Optimum Technologies seeks 
Software Engineers to design & 
develop compiex s/ware appins 
using UNIX, Windows, C++ 
VC++, VB, PL/SQL, Unix 
Scripting (sed, awk, grep) Linux 
Scripting, SS7, Oracle, SQL Svr 
& related tools. MS or eqvint in 
Comp Sci, Engineering, Busin- 
ess or a closely related field & 
min one yr exp req'd. Job in 
Woodridge, iL & other locations 
Apply to HR, Optimum Tech. 
1230 Golfview Dr., Woodridge. 
IL 60517. Fax: 630 985 7825 
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Computers-Staff Leads needed 
Seeking qual. candidates pos- 
sessing MS or equiv. and/or rel 
work exp. Part of the required rel 
exp. must include 6 months work- 
ing with PeopleSoft ERP, Oracie 
& DB2. Duties include: Design, 
develop & implement business 
solutions & applications; Create 
system conversions of legacy 
mainframe systems to PeopleSoft 
systems; Mentor junior tech. con- 
Sultants. Must be willing to travel 
extensively & relocate as req'd. 
Exp. in SQR, SQL with UNIX & 
Windows platform preferred 
Fwd. resume & ref. to: Cedar, 
Inc., Attn; HR, 25 Burlington Mall 
Rd., 4th Floor, Burlington, MA 
01803 


PROGRAMMER-ANALYSTS 
needed at client sites to dsgn 
& dvip interfaces & prgm 
modules using Sybase, Java, 
ESQLI/CPP, Peri, Unix, Open 
client library & T-SQL; Write & 
sched jobs thru Autosys & 
Control-M; Access data thru 
DB-Artisan; Synchronize 
d/bases using Sybase replica- 
tion server. Send resume ‘to 
Global Consultants, 601 
Jefferson Rd, Parsippany, NJ 
07054 


Software Engineer - 
Mohegan Lake, NY. Req- 
uire experience in design- 
ing &developing commer- 
cial applications using Java, 
XML, Developer, Oracle 
Data Warehousing & 
Oracle Applications. Reio- 
cation within USA possible. 
Attractive compensation 
package. Send resume to 
Siva, Globytes Technology 
Solutions Lic., 691 
Panorama Drive, Mohegan 
Lake, NY 10547 


Supermarket Retail Bsns seek- 
ing: Software Engineer w/MS 
Degree & 1 year exp. to: analyze 
business needs for users in the 
dept. of consumer goods. 
Custom Des. & maintain system 
using Business Basic, FoxPro. 
VB 5, SQL Svr, FRX, Crystal 
Reports & Win NT on mainframe 
(Unisys A series) to consolidate 
data for reporting. Travel abroad 
& within US to gather user req 
specifications & for Imp. of soft- 
ware. Exp. in retail busn. is 
must. Resume to: Attn: Don 
Winant, MIS-8810, Gristede's 
Foods, Inc., 823 11th Ave, NY 
NY 10019. 


Logos, a Bible Software 
Company, seeks S/w Dsgn 
Analyst for HQ office in 
Bellingham, WA. DESC: Dsgn & 
dev. multilingual info. retrieval 
sys. for use in computer refer- 
ence works util. C++, ATL, COM. 
HTML, JScript, & XML on Win. 
Dev implementations of info 
retrieval approaches including 
auto summarization, term con- 
flation, doc. clustering, cross 
lang. searching, & topic extrac- 
tion. REQS: BS in Engr, CS. 
Math, or Physics + 6 mos. exp 
coding progs. & apps. in C++ for 
Win. Prem. sal. + benes. Pls. 
reply to E. de Kock, Job# LR- 
101, 1313 Commercial St 
Bellingham, WA 98225. 
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Computer Programmer, Pian, 
develop, test, and document 
programs. Evaluate user 
requests for new and modified 
programs for business applica- 
tions using Visual Basic 6.0, 
Microsoft SQL Server, Windows 
2000/NT, and software automa- 
tion for large retail supply chain 
managment. Swansea, SC loca- 
tion. 40 hrs/wk, 9AM-5PM 
Competitive Salary Send 
resume to: Primetech Systems. 
inc., 1010 Green Tree Rd., 
Pittsburg, PA 15220. 


Infobahn 

delivers innovative 
Solutions to business 
clients nationwide. We 
have immediate full time 
oppurtunities for Software 
Engineers. All applicants 
must have a minimum BS in 
Comp.Sci.Engg. or related 
field plus 2 years of experi- 
ence. Send resume to 
Infobahn Technologies, 
(HR) 288 Walnut St. #410, 
Newton MA 02460. 


Senior Software Engineer 
responsible for research, 
design and developing com- 
puter software systems. Will 
conceptualize, design and 
construct a framework for 
business application soft- 
ware. Will use various plat- 
forms including COBRA/J2EE 
and C++, Java and object ori- 
ented design. Must have 5 yrs 
of exp. in job offered. Salary’ 
Competitive. Send resumes 
to: Kate Elliott, Mentisys. 
Inc.1545 Peachtree St.. Ste 
340 Atlanta, GA 30309 


Sr. Database Admin. Design 
analyze, test, maintain & im 
prove logical & physical data- 
bases. Responsible for backup. 
recovery & tuning of databases. 
Calculate optimum values for 
database parameters & system 
analysis. Use Oracle, SQL serv- 
er, &or related skills. Req 4 yrs 
exp in job/4 yrs exp as Systems 
Analyst & Consultant or Asst 
Syst. Anal. Or Sr. Programmer & 
Programmer. Jobsite: West 
Greenwich, Rhode Island. Send 
ad & resume: Yen C. Chong. 
Amgen Inc., One Amgen Center 
Dr., Thousand Oaks, CA 91320- 
1799. Include Ad# 02-412FV. 


Database Analyst 
sought by Telecom 
Network Solutions 
co. Bach in Comp 
Sci/Eng or related 
field w/3 yrs exp. 
Respond by resume 
to HR Dept, 
Amplidyne, Inc, 5475 
Peoria St, Bidg 1, Ste 
J, Denver, CO 80239. 
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OH Data/Telecom Service Co. 
seeks Programmer-analyst | to 
assist in plan/develop/test/docu- 
ment of computer programs; 
apply knowledge of program 
Techniques and computer sys- 
tems; assist in eval user re- 
quests for new/modified pro- 
grams; consult w/users to identi- 
fy current operating procedures; 
clarify program objectives; enter’ 
program codes into computer 
system; assist in analyzing, 
reviewing, altering program to 
increase operating efficiency. 
Bachelor's in Comp Sci/Civ 
Engin or equiv and 3 mos in 
job/job related exp req., includ- 
ing exp w/UNIX programming. 
C++, Perl, Java, SQL (PgSQL) 
Resumes (no calls) to Boadvox 
LTS, 1228 Euclid Ave. Ste. 390 
Cleveland, OH 44113. EOE 


Applisoft, Inc., is niring Pro- 
grammers/Analysts, Software 
Engineers, System Administra- 
tors, Functional Application 
Consultants and Market 
Research Analysts. May be 
assigned to client sites nation- 
wide. Send resumes to 
Appilisoft, Inc., 12280 Saratoga- 
Sunnyvale Road, Suite # 105. 
Saratoga CA 95070 or email 


applisft@ix.netcom.com 


IT careers and 
IT careers.com 
reach more than 
2/3 of all US IT 
workers every 
week. If you 
need to hire top 
talent, start by 
hiring us. 


Call your 

IT careers Sales 
Representative or 
Nancy Percival at 
1-800-762-2977. 


ITCAREERS 


where the best 
get better 
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Web Applications Developer to 
architect, design, develop, test. 
implement and debug interactive 
web sites and web applications for 
e-commerce clients, utilizing full 
range of web development skills 
(including XML, XSLT, CGI), busi- 
ness layer skills (including COM 
and CORBA) and back end office 
systems (including DB2, AS400 
and MySQL). Requires Masters or 
equivaient level degree in Com. 
puter Science, Math, Physics 
Engineering, Chemistry (Math 
Based) or closely related field and 
2 years of experience in business 
to business software development 
Qualified applicants must be eligi 
bie for permanent employment in 
ithe United States. Send resumes 
to: Ms. Carol Stano, Controlier, 
Drone & Mueller and Associates. 
12977 N. Forty Drive, Suite 100. 
St. Louis, Missouri 63141 


JUNIOR PROGRAMMER/ANA- 
LYST to analyze, design, develop 
and maintain enterpnse application 
software systems in a client/server 
environment using PowerBuilder 
C++, Visual C++, SQL, PL/SOL 
Java, SQL Server, Oracle and 
Sybase under Windows and UNIX 
SCO operating systems; Perform 
duties under close supervision of 
Project director to ensure accuracy 
and that project progresses accord- 
ing to prescribed instructions and 
expected results are met. Require: 
B.S. degree in Computer Science 
an Engineering discipline, or a 
closely related field with one year 
of experience in the job offered or 
as a Programmer. Extensive travel 
ion assignment to various client 
sites within the U.S. is required 
‘Competitive salary offered. Apply 
by resume to: Shri Ganga 
President, Syspro Technologies 
Inc., 3091 Holcomb Bridge Rd 
Suite H-2, Norcross, GA 30071 
Attn: Job KS 


PROGRAMMER/ANALYST to 
analyze user requirements, and 
design and develop manufac 
turing applications using Visual 
FoxPro, Clipper and Visual 
Basic under Windows and UNIX 
operating systems. Require 
B.S. degree in Computer Sci 
ence/Engineering, or a closely 
related field with two years of 
experience in the job offered or 
as a Systems/Analyst. Compet- 
itive salary offered. Apply by 
resume to: Kyle Williams. 
Concord Business System. 
1701 Barret Lakes Blvd 
Kennesaw, GA 30144; Attn: Job 
SP. 


Pro Softnet Corporation 
has multiple openings at 
its Woodland Hills office, 
and unanticipated client 
sites throughout the U.S 
for the following postions: 
Software Engineers, Pro- 
grammer Analyst, Busi- 
ness Manager, Manage- 
ment Analyst Mail 
resumes to : Pro Softnet 
Corp. 21300 Vicory Bivd 
# 1230 Woodland Hills, 

913007 Attn R 


Computers-Programmer 
Analysts needed. Seeking 
qual. candidates possessing 
BS or equiv. and/or rel. work 
exp. Part of the required rel. 
exp. must include 1 yr. work- 
ing with Visual Basic, MS 
SQL Server & Unix (AIX) and 
6 months working with People 
Tools. Work with 3 of the fol- 
lowing: MS SQL Server, 
Visual Basic, Unix (AIX), 
Windows NT, Oracle & People 
Tools. Fwd. resume & ref. to 
Percipia, Inc., Attn: HR, 816 
Morrison Rd., Gahanna, OH 
43230. 
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NEWS MEDIA MANAGER - WABC 


Eyewitness News has an immedi- 
ate opening for a News Media 
Manager. Responsibilities include 
managing media ingest, output and 
traffic flow for multiple newscasts 
including digital playback. supervis 
ing news editors, news editing, and 
managing digital servers and 
archives. 


The successful candidate will have 
a minimum of 3 years television 
News editing experience, and multi- 
ple years experience working in a 
TV newsroom exercising editonal 
judgment. Must be proficient in 
non-linear editing techniques, com- 
puter literate, comfortable working 
with Microsoft Office and Windows 
NT, as weil as experience with one 
or more newsroom systems such 


as AP ENPS 


This individual must be highly orga 
nized and used to working under 
tight deadlines while working on 
multiple, overlapping projects. The 
News Media Manager will work 
closely with News Producers and 
Management to ensure the timely 
and accurate production of news 
casts, special reports and special 
segments. Pnor supervisory exper 
ence preferred 


Please send resume to: Ted 
law News Operations 
anager, WABC-TV, 7 Lincoin 
Square 4th Fi, New York, NY 
10023. No calls please. We are an 
Equal Opportunity Employer 


SOFTWARE ENGINEER to 
design, develop, implement and 
maintain web-based application 
software and enterprise wide 
databases/reports using Visual 
Basic, ASP, SQL Server, Oracle 
Developer, Oracle Designer 
Oracle Discoverer Tools, Active 
Reports and Oracle Reports 
under Windows and UNIX oper. 
ating systems; Mentor junior 
programmers and engineers 
Require B.S degree in 
Computer Science, an Engin 
eering discipline, or a closely 
related field with four years of 
experience in the job offered or 
as a Programmer! Analyst 
Extensive travel on assignment 
to various client sites within the 
U.S. is required. Competitive 
salary offered. Apply by resume 
to: Vishy Dasari, President 
Objectnet Technologies, Inc 
1117 Perimeter Center West 
#E-104, Atlanta, GA 30338 
Attn: Job CB 


Eclipsys Corporation, a global 
healthcare information technolo. 
gy and services company, seeks 
a qualified applicant for the posi- 
tion of VP - Sales Executive for its 
Malvern, PA location. Position 
requires a minimum of a Bach 
elor's degree in Marketing 
Business Admin., or Healthcare 
Admin, or equivalent, plus 2 yrs 
exp in sales or marketing in a 
heaithcare environment. To apply 
visit our web site at 

www. eclipsys.com 

ECLIPSYS 
The Outcomes Company 

Equal Oppty Employer M/F/D/V 


Information Systems Mana- 
ger needed. Seeking qualified 
candidates possessing MS/ 
BS or equiv. and/or rel. work 
exp. Part of the req. rel. work 
exp. must include one year 
working with SQL Server 
Visual Basic, and Visual 
Interdev. Duties include: Plan, 
direct and coordinate ail infor- 
mation systems projects; 
Assess hardware and soft- 
ware needs and provide tech- 
nical support. Mail res., ref 
and sal. req. to Shelby County’ 
Trustee’s Office, 160 N. Main 

Memphis, TN 
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BEA 


Mass.-based Giga Information 
Group Inc. Rymer said the 
tool’s initial version served as 
a proof of concept of BEA’s 
overall design of an event- 
based Java development envi- 
ronment similar in intent to 
Microsoft Corp.’s Visual Basic. 


He predicted that the new tool | 


will have a substantial effect 
on developer productivity. 
Even in the tool’s early in- 
carnation, some companies 
found benefit. Richard Lynn, 
vice president of global appli- 
cations at Pfizer Inc.’s phar- 
maceutical group, said his di- 
vision was able to set aggres- 
sive timetables with the out- 
sourcers that develop its ap- 
plications, knowing that the 
BEA tool gave them added 
flexibility to make changes. 
Lynn said the new tool will 
provide more benefits, since 
developers will no longer have 
to “Alt-Tab” between applica- 








tions, and they will be able to 
more easily reuse code. 

BEA is promoting its new 
WebLogic Platform as a way 
to converge integration and 
custom application develop- 
ment. Kapoor said the adop- 
tion of integration brokers has 
been limited, but he hopes 
WebLogic Platform 8.1, with 
its newly unified architecture, 
will make integration more 
mainstream by reducing the 
complexity, cost and time 
needed for such projects. 

So far, BEA has made its 
mark as an application server 
vendor, vying with IBM for 
the top spot in market share. 
But BEA has struggled for 
recognition in the application 
integration space. 

Thomas Murphy, an analyst 
at Stamford, Conn.-based 
Meta Group Inc., said he 
thinks that as developers be- 
come more productive using 
the new suite, the appeal of 
BEA'ss integration products 
will increase. 

Murphy said he expects 


SAN JOSE 


SOURCE: BEA SYSTEMS INC 


WebLogic Upgrade 


platform vendors such as BEA 
and IBM to eventually provide 
all of the integration tools that 


| most companies need, pushing 


to niche vertical markets the 
vendors that specialize in inte- 
gration brokers. 

Jon Derome, an analyst at 


The Yankee Group in Boston, 
said that in the past 10 months, 
he has noticed that IBM and 
BEA have been turning up 

on users’ short lists for inte- 
gration projects, alongside 
integration broker vendors 
such as webMethods Inc. 


and Vitria Technology Inc. 

Derome said the combined 
application server/integration 
broker offering can make a lot 
of sense for companies with 
complex integration chal- 
lenges involving multiple lega- 
cy or packaged applications 
and Web applications. 

Just because BEA is promot- 
ing the new products and new 
versions doesn’t mean users 
will be rushing to get them. 
Bear, Stearns & Co., for in- 
stance, has major financial ap- 
plications running on BEA’s 
WebLogic Server. 

Most of the applications are 
running on Version 5.1, and 
Bear, Stearns is looking to 
convert to 7.0, said Sue Picus, 
managing director in the ar- 
chitecture office at the New 
York-based company. 

“We don’t just drop every- 
thing and convert,” said Picus, 
noting that it costs money to 
port code to a new version 
and to retest the complete sys- 
tem. “We tend to upgrade only 


| when there’s a need.” D 





Continued from page 1 


a lot of careful upfront analy- 
sis before adoption. 

“There is still some confu- 
sion. This is still tricky for 
some users,” said Marcy Ne- 
chemias, an IBM pricing man- 
ager. “But the overall message 
here is that WLC is here to 
stay.” She added, “There have 
been some rumors that IBM is 
going to discontinue WLC. 
Those are completely untrue.” 

Hewitt Associates LLC, a 
human resources outsourcer 
in Lincolnshire, Ill., has been 
using WLC since November 
2001. The company is saving 
approximately 25% in monthly 
mainframe software licensing 
costs, said Dan Kaberon, He- 
witt Associates’ Parallel Sys- 
plex manager. 

“It was a good deal on the 
first day of the first month, 
and it has become easier to 





implement and more valuable 
for us to exploit with every 
change that IBM has made,” 
Kaberon said. 

In many instances, compa- 
nies aren’t moving to WLC 
simply because they see little 
benefit in it, said Stan King, 
president of Information 
Technology Co., an IBM busi- 
ness partner in Falls Church, 
Va. None of the 65 data cen- 
ters that are directly support- 
ed by Information Technology 
has adopted WLC, King said. 
In all 65 cases, mainframes 
and associated software are 
being used at full throttle in 
production environments. 
Such shops won't see the same 
benefits from WLC, which 
favors users that don’t fully 
max out capacities or those 
that have variable workloads, 
King said. 

“There can be tremendous 
saving in this for those who 
own application development 
shops or are using mainframes | 








on a limited basis or have 
brand-new requirements,” 
King added. 

Nechemias said IBM will 
work with users to understand 
specific concerns and address 
them where possible. 

For instance, in response to 
user demands, IBM has made 
changes in the way usage is 
defined and measured under 
WLC. More recently, IBM dis- 
continued plans to develop a 
license manager technology 





that was to have been used 
with z/OS, after users com- 
plained that it was too intru- 
sive and complex to install. 

In the same vein, IBM is 
currently working with users 
to clarify issues related to a 
four-hour rolling average met- 
ric IBM uses in some cases to 
measure software usage, Ne- 
chemias said. 

“We are just dotting the i’s 
and crossing the t’s” to clarify 
things for users, Nechemias 
said. Later this year, IBM plans | 


to highlight several customer 
case studies showing how ear- 
ly users who have implement- 
ed WLC are taking advantage 
of it, she said. 

IBM’s move to educate 
users about WLC comes at a 
time when barely 40% of all 


| 2/OS users have adopted the 


pricing model, despite its tout- 
ed benefits. 

“In terms of an adoption 
rate, one of the gating factors 
is that a lot of users are run- 
ning z/OS in a mixed environ- 
ment” with OS/390, said Mike 





Chuba, an analyst at Stamford, 
Conn.-based Gartner Inc. That | 
makes WLC hard to imple- 
ment, he said. 

Another major factor is 
that WLC’s benefits can vary 
widely depending on the over- 
all capacity of installed main- 
frames and the applications 
that run on them, so users 
need to do the necessary 
analysis before making a 
move, Chuba said. | 


TM Oeics 


IBM’s Workload License 

Charge allows users to: 
= Pay for mainframe soft- 
ware based on workload- 
capacity requirements. 
= Upgrade hardware with- 
out necessarily incurring as- 
sociated increases in soft- 
ware fees. 


= Handle sudden workload 
spikes without paying extra 
for them. 


For instance, a mainframe 
user with less than 1,000 MIPS 
installed is unlikely to see 
much of a price benefit and is 
probably better off with cur- 
rent Parallel Sysplex licensing 
models, Chuba said. On the 


| other hand, a user with more 


than 1,000 MIPS running mul- 
tiple software packages could 
benefit substantially by mov- 

ing to WLC, he said. B 
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Offshore Face-off 


ERVOUS ABOUT OFFSHORE OUTSOURCING? You 

should be — and not just because offshoring has just 

become the favorite theme of the usual IT-analyst sus- 

pects. Last week at Computerworld’s Premier 100 con- 

ference, some panelists were throwing around cost 
numbers, like 8 cents on the dollar for offshore IT work. Is that real- 
istic? No. Will it get your CEO’s attention? You bet. 

So ask yourself this: How much of my IT shop’s work doesn’t re- 
quire “face time”? That should give you a pretty good idea how 
much of your work might be shipped off to Bangalore. 

Along with a pretty good idea of just how obsolete you’ve become. 


Not obsolete as in, “You’re obsolete because 
what you do can be done more cheaply off- 
shore.” But as in, “You’re obsolete because 
what you do doesn’t meet the needs of the 
business any longer.” 

Does that sound too simple? Think about it: 
Business is about face time. Every good execu- 
tive, manager and salesman knows that. And 
if IT’s top priority is to align with business 
needs, how well we're aligned should show up 
in our face-time numbers. 

Besides, what a business needs from its IT 
shop today isn’t technology. Technology is easy 
to buy. Hardware and software vendors deliver 
it by the truckload. Sure, IT shops were once 
in the technology-making game. We routinely 
wrote big enterprise applications and even op- 
erating systems. But those days are long gone. 

What the business needs isn’t even the tech- 
nical smarts to get the technologies working 
together. Specialist consultants can get an SAP 
installation going faster than internal IT people 
can, or bring new multitier middleware online 
with fewer problems than you'd have trying to 
dope it out with in-house talent. 

What the business needs is the 
ability to do business better, faster 
and more effectively. And what the 
business needs from IT is to make 
sure technology makes the business 
better, faster and more effective. 

So face time is bound to be a tell- 
tale marker. You can’t understand a 
user’s business probiems without 
spending time watching, listening, 
asking questions and clarifying an- 
swers. That takes face time. 

You can’t make certain that some 
big, new supply chain system will 


actually make the business more agile and ef- 
fective unless you check out your assumptions 
with warehouse and logistics people and sup- 
pliers. You can’t be sure that a CRM system 
will help salespeople write more orders until 
you get a view through the eyes of those sales- 
people. That’s face time and more face time. 

And you can’t know how well systems are 
actually serving the business without spending 
time face to face with the people using them. 

It’s grim but true: If corporate IT shops think 
IT is all about making technology, they can’t 
compete. Our huge homegrown Cobol systems 
couldn’t compete with SAP and PeopleSoft. 
And our teams of heads-down, cubicle-bound 
programmers working on big, well-specified 
applications can’t compete with teams in India 
and Russia, where discipline is higher and the 
pay is much lower. 

Anything we can do isolated in our IT shop 
cubicles, they can do in their offshore cubicles 
— and almost always faster and cheaper. 

But they can’t do face time. And they can’t 
really know our business and put IT fully into 

its service. And those are the 
things the organizations we serve 
need from their IT shops today. 

All that face time and business 
focus might not be what we’d pre- 
fer. It may well not be the reason 
we wanted to get into IT in the 
first place. It may even scare some 
IT people. 

But that’s what we’re needed for 
today. And offshoring is just anoth- 
er reminder that the business does 
need us — but we have to do what 
the business needs. 

Or face becoming obsolete. D 
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WebSphere. Boact 


PORTAL 
PLAY 


1] WIN WITH PORTALS: Here. There. Everywhere. With information 
coming from infinite sources, a seamlessly integrated portal 
is crucial for both increased productivity and reduced costs 


2] WIN WITH WEBSPHERE: WebSphere offers a pre-integrated, 
2asy-to-implement portal solution complete with leading- 
edge collaboration from Lotus? content management from DB2* 
and the best in security capabilities from Tivoli® 


3] MAKE THE PLAY: Visit ilarm.com/websphere/portalplay 
for a free portal kit with downloadable demos and testimonials. 


© business is the game. Play to win.” 
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